Enano CMS (1.1.x): comparison includes/sessions.php

equal deleted inserted replaced

-:de56132c008d
+:bdac73ed481e
 * @subpackage Session manager
 * @category security, user management, logins, etc.
 */
 class sessionManager {
-# Variables
+	# Variables
-/**
+	/**
-* Whether we're logged in or not
+	* Whether we're logged in or not
-* @var bool
+	* @var bool
-*/
+	*/
-var $user_logged_in = false;
+	var $user_logged_in = false;
-/**
+	/**
-* Our current low-privilege session key
+	* Our current low-privilege session key
-* @var string
+	* @var string
-*/
+	*/
-var $sid;
+	var $sid;
-/**
+	/**
-* Username of currently logged-in user, or IP address if not logged in
+	* Username of currently logged-in user, or IP address if not logged in
-* @var string
+	* @var string
-*/
+	*/
-var $username;
+	var $username;
-/**
+	/**
-* User ID of currently logged-in user, or 1 if not logged in
+	* User ID of currently logged-in user, or 1 if not logged in
-* @var int
+	* @var int
-*/
+	*/
-var $user_id = 1;
+	var $user_id = 1;
-/**
+	/**
-* Real name of currently logged-in user, or blank if not logged in
+	* Real name of currently logged-in user, or blank if not logged in
-* @var string
+	* @var string
-*/
+	*/
-var $real_name;
+	var $real_name;
-/**
+	/**
-* E-mail address of currently logged-in user, or blank if not logged in
+	* E-mail address of currently logged-in user, or blank if not logged in
-* @var string
+	* @var string
-*/
+	*/
-var $email;
+	var $email;
-/**
+	/**
-* List of "extra" user information fields (IM handles, etc.)
+	* List of "extra" user information fields (IM handles, etc.)
-* @var array (associative)
+	* @var array (associative)
-*/
+	*/
-var $user_extra;
+	var $user_extra;
-/**
+	/**
-* User level of current user
+	* User level of current user
-* USER_LEVEL_GUEST: guest
+	* USER_LEVEL_GUEST: guest
-* USER_LEVEL_MEMBER: regular user
+	* USER_LEVEL_MEMBER: regular user
-* USER_LEVEL_CHPREF: default - pseudo-level that allows changing password and e-mail address (requires re-authentication)
+	* USER_LEVEL_CHPREF: default - pseudo-level that allows changing password and e-mail address (requires re-authentication)
-* USER_LEVEL_MOD: moderator
+	* USER_LEVEL_MOD: moderator
-* USER_LEVEL_ADMIN: administrator
+	* USER_LEVEL_ADMIN: administrator
-* @var int
+	* @var int
-*/
+	*/
-var $user_level;
+	var $user_level;
-/**
+	/**
-* High-privilege session key
+	* High-privilege session key
-* @var string or false if not running on high-level authentication
+	* @var string or false if not running on high-level authentication
-*/
+	*/
-var $sid_super;
+	var $sid_super;
-/**
+	/**
-* The user's theme preference, defaults to $template->default_theme
+	* The user's theme preference, defaults to $template->default_theme
-* @var string
+	* @var string
-*/
+	*/
-var $theme;
+	var $theme;
-/**
+	/**
-* The user's style preference, or style auto-detected based on theme if not logged in
+	* The user's style preference, or style auto-detected based on theme if not logged in
-* @var string
+	* @var string
-*/
+	*/
-var $style;
+	var $style;
-/**
+	/**
-* Signature of current user - appended to comments, etc.
+	* Signature of current user - appended to comments, etc.
-* @var string
+	* @var string
-*/
+	*/
-var $signature;
+	var $signature;
-/**
+	/**
-* UNIX timestamp of when we were registered, or 0 if not logged in
+	* UNIX timestamp of when we were registered, or 0 if not logged in
-* @var int
+	* @var int
-*/
+	*/
-var $reg_time;
+	var $reg_time;
-/**
+	/**
-* The number of unread private messages this user has.
+	* The number of unread private messages this user has.
-* @var int
+	* @var int
-*/
+	*/
-var $unread_pms = 0;
+	var $unread_pms = 0;
-/**
+	/**
-* AES key used to encrypt passwords and session key info.
+	* AES key used to encrypt passwords and session key info.
-* @var string
+	* @var string
-* @access private
+	* @access private
-*/
+	*/
-protected $private_key;
+	protected $private_key;
-/**
+	/**
-* Regex that defines a valid username, minus the ^ and $, these are added later
+	* Regex that defines a valid username, minus the ^ and $, these are added later
-* @var string
+	* @var string
-*/
+	*/
-var $valid_username = '([^<>&\?\'"%\n\r\t\a\/]+)';
+	var $valid_username = '([^<>&\?\'"%\n\r\t\a\/]+)';
-/**
+	/**
-* The current user's user title. Defaults to NULL.
+	* The current user's user title. Defaults to NULL.
-* @var string
+	* @var string
-*/
+	*/
-var $user_title = null;
+	var $user_title = null;
-/**
+	/**
-* What we're allowed to do as far as permissions go. This changes based on the value of the "auth" URI param.
+	* What we're allowed to do as far as permissions go. This changes based on the value of the "auth" URI param.
-* @var string
+	* @var string
-*/
+	*/
-var $auth_level = 1;
+	var $auth_level = 1;
-/**
+	/**
-* Preference for date formatting
+	* Preference for date formatting
-* @var string
+	* @var string
-*/
+	*/
-var $date_format = DATE_4;
+	var $date_format = DATE_4;
-/**
+	/**
-* Preference for time formatting
+	* Preference for time formatting
-* @var string
+	* @var string
-*/
+	*/
-var $time_format = TIME_24_NS;
+	var $time_format = TIME_24_NS;
-/**
+	/**
-* State variable to track if a session timed out
+	* State variable to track if a session timed out
-* @var bool
+	* @var bool
-*/
+	*/
-var $sw_timed_out = false;
+	var $sw_timed_out = false;
-/**
+	/**
-* Token appended to some important forms to prevent CSRF.
+	* Token appended to some important forms to prevent CSRF.
-* @var string
+	* @var string
-*/
+	*/
-var $csrf_token = false;
+	var $csrf_token = false;
-/**
+	/**
-* Password change disabled, for auth plugins
+	* Password change disabled, for auth plugins
-* @var bool
+	* @var bool
-*/
+	*/
-var $password_change_disabled = false;
+	var $password_change_disabled = false;
-/**
+	/**
-* Password change page URL + title, for auth plugins
+	* Password change page URL + title, for auth plugins
-* @var array
+	* @var array
-*/
+	*/
-var $password_change_dest = array('url' => '', 'title' => '');
+	var $password_change_dest = array('url' => '', 'title' => '');
-/**
+	/**
-* Switch to track if we're started or not.
+	* Switch to track if we're started or not.
-* @access private
+	* @access private
-* @var bool
+	* @var bool
-*/
+	*/
-var $started = false;
+	var $started = false;
-/**
+	/**
-* Switch to control compatibility mode (for older Enano websites being upgraded)
+	* Switch to control compatibility mode (for older Enano websites being upgraded)
-* @access private
+	* @access private
-* @var bool
+	* @var bool
-*/
+	*/
-var $compat = false;
+	var $compat = false;
-/**
+	/**
-* Our list of permission types.
+	* Our list of permission types.
-* @access private
+	* @access private
-* @var array
+	* @var array
-*/
+	*/
-var $acl_types = Array();
+	var $acl_types = Array();
-/**
+	/**
-* The list of descriptions for the permission types
+	* The list of descriptions for the permission types
-* @var array
+	* @var array
-*/
+	*/
-var $acl_descs = Array();
+	var $acl_descs = Array();
-/**
+	/**
-* A list of dependencies for ACL types.
+	* A list of dependencies for ACL types.
-* @var array
+	* @var array
-*/
+	*/
-var $acl_deps = Array();
+	var $acl_deps = Array();
-/**
+	/**
-* Our tell-all list of permissions. Do not even try to change this.
+	* Our tell-all list of permissions. Do not even try to change this.
-* @access private
+	* @access private
-* @var array
+	* @var array
-*/
+	*/
-var $perms = Array();
+	var $perms = Array();
-/**
+	/**
-* A cache variable - saved after sitewide permissions are checked but before page-specific permissions.
+	* A cache variable - saved after sitewide permissions are checked but before page-specific permissions.
-* @var array
+	* @var array
-* @access private
+	* @access private
-*/
+	*/
-var $acl_base_cache = Array();
+	var $acl_base_cache = Array();
-/**
+	/**
-* Stores the scope information for ACL types.
+	* Stores the scope information for ACL types.
-* @var array
+	* @var array
-* @access private
+	* @access private
-*/
+	*/
-var $acl_scope = Array();
+	var $acl_scope = Array();
-/**
+	/**
-* Array to track which default permissions are being used
+	* Array to track which default permissions are being used
-* @var array
+	* @var array
-* @access private
+	* @access private
-*/
+	*/
-var $acl_defaults_used = Array();
+	var $acl_defaults_used = Array();
-/**
+	/**
-* Array to track group membership.
+	* Array to track group membership.
-* @var array
+	* @var array
-*/
+	*/
-var $groups = Array();
+	var $groups = Array();
-/**
+	/**
-* Associative array to track group modship.
+	* Associative array to track group modship.
-* @var array
+	* @var array
-*/
+	*/
-var $group_mod = Array();
+	var $group_mod = Array();
-/**
+	/**
-* A constant array of user-level-to-rank default associations.
+	* A constant array of user-level-to-rank default associations.
-* @var array
+	* @var array
-*/
+	*/
-var $level_rank_table = array(
+	var $level_rank_table = array(
-USER_LEVEL_ADMIN  => RANK_ID_ADMIN,
+			USER_LEVEL_ADMIN  => RANK_ID_ADMIN,
-USER_LEVEL_MOD    => RANK_ID_MOD,
+			USER_LEVEL_MOD    => RANK_ID_MOD,
-USER_LEVEL_MEMBER => RANK_ID_MEMBER,
+			USER_LEVEL_MEMBER => RANK_ID_MEMBER,
-USER_LEVEL_CHPREF => RANK_ID_MEMBER,
+			USER_LEVEL_CHPREF => RANK_ID_MEMBER,
-USER_LEVEL_GUEST  => RANK_ID_GUEST
+			USER_LEVEL_GUEST  => RANK_ID_GUEST
-);
+		);
-/**
+	/**
-* A constant array that maps precedence constants to language strings
+	* A constant array that maps precedence constants to language strings
-* @var array
+	* @var array
-*/
+	*/
-var $acl_inherit_lang_table = array(
+	var $acl_inherit_lang_table = array(
-ACL_INHERIT_ENANO_DEFAULT   => 'acl_inherit_enano_default',
+			ACL_INHERIT_ENANO_DEFAULT   => 'acl_inherit_enano_default',
-ACL_INHERIT_GLOBAL_EVERYONE => 'acl_inherit_global_everyone',
+			ACL_INHERIT_GLOBAL_EVERYONE => 'acl_inherit_global_everyone',
-ACL_INHERIT_GLOBAL_GROUP    => 'acl_inherit_global_group',
+			ACL_INHERIT_GLOBAL_GROUP    => 'acl_inherit_global_group',
-ACL_INHERIT_GLOBAL_USER     => 'acl_inherit_global_user',
+			ACL_INHERIT_GLOBAL_USER     => 'acl_inherit_global_user',
-ACL_INHERIT_PG_EVERYONE     => 'acl_inherit_pg_everyone',
+			ACL_INHERIT_PG_EVERYONE     => 'acl_inherit_pg_everyone',
-ACL_INHERIT_PG_GROUP        => 'acl_inherit_pg_group',
+			ACL_INHERIT_PG_GROUP        => 'acl_inherit_pg_group',
-ACL_INHERIT_PG_USER         => 'acl_inherit_pg_user',
+			ACL_INHERIT_PG_USER         => 'acl_inherit_pg_user',
-ACL_INHERIT_LOCAL_EVERYONE  => 'acl_inherit_local_everyone',
+			ACL_INHERIT_LOCAL_EVERYONE  => 'acl_inherit_local_everyone',
-ACL_INHERIT_LOCAL_GROUP     => 'acl_inherit_local_group',
+			ACL_INHERIT_LOCAL_GROUP     => 'acl_inherit_local_group',
-ACL_INHERIT_LOCAL_USER      => 'acl_inherit_local_user'
+			ACL_INHERIT_LOCAL_USER      => 'acl_inherit_local_user'
-);
+		);
-# Basic functions
+	# Basic functions
-/**
+	/**
-* Constructor.
+	* Constructor.
-*/
+	*/
-function __construct()
+	function __construct()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( defined('IN_ENANO_INSTALL') && !defined('IN_ENANO_UPGRADE') )
+		if ( defined('IN_ENANO_INSTALL') && !defined('IN_ENANO_UPGRADE') )
-{
+		{
-@include(ENANO_ROOT.'/config.new.php');
+			@include(ENANO_ROOT.'/config.new.php');
-}
+		}
-else
+		else
-{
+		{
-@include(ENANO_ROOT.'/config.php');
+			@include(ENANO_ROOT.'/config.php');
-}
+		}
-unset($dbhost, $dbname, $dbuser, $dbpasswd);
+		unset($dbhost, $dbname, $dbuser, $dbpasswd);
-if(isset($crypto_key))
+		if(isset($crypto_key))
-{
+		{
-$this->private_key = $crypto_key;
+			$this->private_key = $crypto_key;
-$this->private_key = hexdecode($this->private_key);
+			$this->private_key = hexdecode($this->private_key);
-}
+		}
-else
+		else
-{
+		{
-if(is_writable(ENANO_ROOT.'/config.php'))
+			if(is_writable(ENANO_ROOT.'/config.php'))
-{
+			{
-// Generate and stash a private key
+				// Generate and stash a private key
-// This should only happen during an automated silent gradual migration to the new encryption platform.
+				// This should only happen during an automated silent gradual migration to the new encryption platform.
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+				$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-$this->private_key = $aes->gen_readymade_key();
+				$this->private_key = $aes->gen_readymade_key();
-$config = file_get_contents(ENANO_ROOT.'/config.php');
+				$config = file_get_contents(ENANO_ROOT.'/config.php');
-if(!$config)
+				if(!$config)
-{
+				{
-die('$session->__construct(): can\'t get the contents of config.php');
+					die('$session->__construct(): can\'t get the contents of config.php');
-}
+				}
-$config = str_replace("?>", "\$crypto_key = '{$this->private_key}';\n?>", $config);
+				$config = str_replace("?>", "\$crypto_key = '{$this->private_key}';\n?>", $config);
-// And while we're at it...
+				// And while we're at it...
-$config = str_replace('MIDGET_INSTALLED', 'ENANO_INSTALLED', $config);
+				$config = str_replace('MIDGET_INSTALLED', 'ENANO_INSTALLED', $config);
-$fh = @fopen(ENANO_ROOT.'/config.php', 'w');
+				$fh = @fopen(ENANO_ROOT.'/config.php', 'w');
-if ( !$fh )
+				if ( !$fh )
-{
+				{
-die('$session->__construct(): Couldn\'t open config file for writing to store the private key, I tried to avoid something like this...');
+					die('$session->__construct(): Couldn\'t open config file for writing to store the private key, I tried to avoid something like this...');
-}
+				}
-fwrite($fh, $config);
+				fwrite($fh, $config);
-fclose($fh);
+				fclose($fh);
-}
+			}
-else
+			else
-{
+			{
-die_semicritical('Crypto error', '<p>No private key was found in the config file, and we can\'t generate one because we don\'t have write access to the config file. Please CHMOD config.php to 666 or 777 and reload this page.</p>');
+				die_semicritical('Crypto error', '<p>No private key was found in the config file, and we can\'t generate one because we don\'t have write access to the config file. Please CHMOD config.php to 666 or 777 and reload this page.</p>');
-}
+			}
-}
+		}
-// Check for compatibility mode
+		// Check for compatibility mode
-if(defined('IN_ENANO_INSTALL'))
+		if(defined('IN_ENANO_INSTALL'))
-{
+		{
-$q = $db->sql_query('SELECT old_encryption FROM '.table_prefix.'users LIMIT 1;');
+			$q = $db->sql_query('SELECT old_encryption FROM '.table_prefix.'users LIMIT 1;');
-if(!$q)
+			if(!$q)
-{
+			{
-$error = mysql_error();
+				$error = mysql_error();
-if(strstr($error, "Unknown column 'old_encryption'"))
+				if(strstr($error, "Unknown column 'old_encryption'"))
-$this->compat = true;
+					$this->compat = true;
-else
+				else
-$db->_die('This should never happen and is a bug - the only error that was supposed to happen here didn\'t happen. (sessions.php in constructor, during compat mode check)');
+					$db->_die('This should never happen and is a bug - the only error that was supposed to happen here didn\'t happen. (sessions.php in constructor, during compat mode check)');
-}
+			}
-$db->free_result();
+			$db->free_result();
-}
+		}
-}
+	}
-/**
+	/**
-* PHP 4 compatible constructor. Deprecated in 1.1.x.
+	* PHP 4 compatible constructor. Deprecated in 1.1.x.
-*/
+	*/
-/*
+	/*
-function sessionManager()
+	function sessionManager()
-{
+	{
-$this->__construct();
+		$this->__construct();
-}
+	}
-*/
+	*/
-/**
+	/**
-* Wrapper function to sanitize strings for MySQL and HTML
+	* Wrapper function to sanitize strings for MySQL and HTML
-* @param string $text The text to sanitize
+	* @param string $text The text to sanitize
-* @return string
+	* @return string
-*/
+	*/
-function prepare_text($text)
+	function prepare_text($text)
-{
+	{
-global $db;
+		global $db;
-return $db->escape(htmlspecialchars($text));
+		return $db->escape(htmlspecialchars($text));
-}
+	}
-/**
+	/**
-* Makes a SQL query and handles error checking
+	* Makes a SQL query and handles error checking
-* @param string $query The SQL query to make
+	* @param string $query The SQL query to make
-* @return resource
+	* @return resource
-*/
+	*/
-function sql($query)
+	function sql($query)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$result = $db->sql_query($query);
+		$result = $db->sql_query($query);
-if(!$result)
+		if(!$result)
-{
+		{
-$db->_die('The error seems to have occurred somewhere in the session management code.');
+			$db->_die('The error seems to have occurred somewhere in the session management code.');
-}
+		}
-return $result;
+		return $result;
-}
+	}
-/**
+	/**
-* Returns true if we're currently on a page that shouldn't be blocked even if we have an inactive or banned account
+	* Returns true if we're currently on a page that shouldn't be blocked even if we have an inactive or banned account
-* @param bool strict - if true, whitelist of pages is even stricter (Login, Logout and CSS only). if false (default), admin access is allowed, assuming other factors allow it
+	* @param bool strict - if true, whitelist of pages is even stricter (Login, Logout and CSS only). if false (default), admin access is allowed, assuming other factors allow it
-* @return bool
+	* @return bool
-*/
+	*/
-function on_critical_page($strict = false)
+	function on_critical_page($strict = false)
-{
+	{
-global $urlname;
+		global $urlname;
-list($page_id, $namespace) = RenderMan::strToPageID($urlname);
+		list($page_id, $namespace) = RenderMan::strToPageID($urlname);
-list($page_id) = explode('/', $page_id);
+		list($page_id) = explode('/', $page_id);
-if ( $strict )
+		if ( $strict )
-{
+		{
-return $namespace == 'Special' && in_array($page_id, array('CSS', 'Login', 'Logout', 'LangExportJSON', 'ActivateAccount'));
+			return $namespace == 'Special' && in_array($page_id, array('CSS', 'Login', 'Logout', 'LangExportJSON', 'ActivateAccount'));
-}
+		}
-else
+		else
-{
+		{
-return $namespace == 'Admin' || ($namespace == 'Special' && in_array($page_id, array('CSS', 'Login', 'Logout', 'Administration', 'LangExportJSON', 'ActivateAccount')));
+			return $namespace == 'Admin' || ($namespace == 'Special' && in_array($page_id, array('CSS', 'Login', 'Logout', 'Administration', 'LangExportJSON', 'ActivateAccount')));
-}
+		}
-}
+	}
-# Session restoration and permissions
+	# Session restoration and permissions
-/**
+	/**
-* Initializes the basic state of things, including most user prefs, login data, cookie stuff
+	* Initializes the basic state of things, including most user prefs, login data, cookie stuff
-*/
+	*/
-function start()
+	function start()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-global $timezone;
+		global $timezone;
-if($this->started) return;
+		if($this->started) return;
-$this->started = true;
+		$this->started = true;
-$user = false;
+		$user = false;
-if ( isset($_COOKIE['sid']) )
+		if ( isset($_COOKIE['sid']) )
-{
+		{
-if ( $this->compat )
+			if ( $this->compat )
-{
+			{
-$userdata = $this->compat_validate_session($_COOKIE['sid']);
+				$userdata = $this->compat_validate_session($_COOKIE['sid']);
-}
+			}
-else
+			else
-{
+			{
-$userdata = $this->validate_session($_COOKIE['sid']);
+				$userdata = $this->validate_session($_COOKIE['sid']);
-}
+			}
-if ( is_array($userdata) )
+			if ( is_array($userdata) )
-{
+			{
-$this->sid = $_COOKIE['sid'];
+				$this->sid = $_COOKIE['sid'];
-$this->user_logged_in = true;
+				$this->user_logged_in = true;
-$this->user_id =       intval($userdata['user_id']);
+				$this->user_id =       intval($userdata['user_id']);
-$this->username =      $userdata['username'];
+				$this->username =      $userdata['username'];
-$this->user_level =    intval($userdata['user_level']);
+				$this->user_level =    intval($userdata['user_level']);
-$this->real_name =     $userdata['real_name'];
+				$this->real_name =     $userdata['real_name'];
-$this->email =         $userdata['email'];
+				$this->email =         $userdata['email'];
-$this->unread_pms =    $userdata['num_pms'];
+				$this->unread_pms =    $userdata['num_pms'];
-$this->user_title =    ( isset($userdata['user_title']) ) ? $userdata['user_title'] : null;
+				$this->user_title =    ( isset($userdata['user_title']) ) ? $userdata['user_title'] : null;
-if(!$this->compat)
+				if(!$this->compat)
-{
+				{
-$this->theme =         $userdata['theme'];
+					$this->theme =         $userdata['theme'];
-$this->style =         $userdata['style'];
+					$this->style =         $userdata['style'];
-$this->signature =     $userdata['signature'];
+					$this->signature =     $userdata['signature'];
-$this->reg_time =      $userdata['reg_time'];
+					$this->reg_time =      $userdata['reg_time'];
-}
+				}
-$this->auth_level =    USER_LEVEL_MEMBER;
+				$this->auth_level =    USER_LEVEL_MEMBER;
-// generate an anti-CSRF token
+				// generate an anti-CSRF token
-$this->csrf_token =    sha1($this->username . $this->sid . $this->user_id);
+				$this->csrf_token =    sha1($this->username . $this->sid . $this->user_id);
-if(!isset($template->named_theme_list[$this->theme]))
+				if(!isset($template->named_theme_list[$this->theme]))
-{
+				{
-if($this->compat || !is_object($template))
+					if($this->compat || !is_object($template))
-{
+					{
-$this->theme = 'oxygen';
+						$this->theme = 'oxygen';
-$this->style = 'bleu';
+						$this->style = 'bleu';
-}
+					}
-else
+					else
-{
+					{
-$this->theme = $template->default_theme;
+						$this->theme = $template->default_theme;
-$this->style = $template->default_style;
+						$this->style = $template->default_style;
-}
+					}
-}
+				}
-$user = true;
+				$user = true;
-// set timezone params
+				// set timezone params
-$GLOBALS['timezone'] = $userdata['user_timezone'];
+				$GLOBALS['timezone'] = $userdata['user_timezone'];
-$GLOBALS['dst_params'] = explode(';', $userdata['user_dst']);
+				$GLOBALS['dst_params'] = explode(';', $userdata['user_dst']);
-foreach ( $GLOBALS['dst_params'] as &$parm )
+				foreach ( $GLOBALS['dst_params'] as &$parm )
-{
+				{
-if ( substr($parm, -1) != 'd' )
+					if ( substr($parm, -1) != 'd' )
-$parm = intval($parm);
+						$parm = intval($parm);
-}
+				}
-// Set language
+				// Set language
-if ( !defined('ENANO_ALLOW_LOAD_NOLANG') )
+				if ( !defined('ENANO_ALLOW_LOAD_NOLANG') )
-{
+				{
-$lang_id = intval($userdata['user_lang']);
+					$lang_id = intval($userdata['user_lang']);
-$lang = new Language($lang_id);
+					$lang = new Language($lang_id);
-@setlocale(LC_ALL, $lang->lang_code);
+					@setlocale(LC_ALL, $lang->lang_code);
-}
+				}
-if(isset($_REQUEST['auth']) && !$this->sid_super)
+				if(isset($_REQUEST['auth']) && !$this->sid_super)
-{
+				{
-// Now he thinks he's a moderator. Or maybe even an administrator. Let's find out if he's telling the truth.
+					// Now he thinks he's a moderator. Or maybe even an administrator. Let's find out if he's telling the truth.
-if($this->compat)
+					if($this->compat)
-{
+					{
-$key = $_REQUEST['auth'];
+						$key = $_REQUEST['auth'];
-$super = $this->compat_validate_session($key);
+						$super = $this->compat_validate_session($key);
-}
+					}
-else
+					else
-{
+					{
-$key = $_REQUEST['auth'];
+						$key = $_REQUEST['auth'];
-if ( !empty($key) && ( strlen($key) / 2 ) % 4 == 0 )
+						if ( !empty($key) && ( strlen($key) / 2 ) % 4 == 0 )
-{
+						{
-$super = $this->validate_session($key);
+							$super = $this->validate_session($key);
-}
+						}
-}
+					}
-if(is_array(@$super))
+					if(is_array(@$super))
-{
+					{
-$this->auth_level = intval($super['auth_level']);
+						$this->auth_level = intval($super['auth_level']);
-$this->sid_super = $_REQUEST['auth'];
+						$this->sid_super = $_REQUEST['auth'];
-}
+					}
-}
+				}
-}
+			}
-}
+		}
-if(!$user)
+		if(!$user)
-{
+		{
-//exit;
+			//exit;
-$this->register_guest_session();
+			$this->register_guest_session();
-}
+		}
-if(!$this->compat)
+		if(!$this->compat)
-{
+		{
-// init groups
+			// init groups
-$q = $this->sql('SELECT g.group_name,g.group_id,m.is_mod FROM '.table_prefix.'groups AS g' . "\n"
+			$q = $this->sql('SELECT g.group_name,g.group_id,m.is_mod FROM '.table_prefix.'groups AS g' . "\n"
-. '  LEFT JOIN '.table_prefix.'group_members AS m' . "\n"
+				. '  LEFT JOIN '.table_prefix.'group_members AS m' . "\n"
-. '    ON g.group_id=m.group_id' . "\n"
+				. '    ON g.group_id=m.group_id' . "\n"
-. '  WHERE ( m.user_id='.$this->user_id.'' . "\n"
+				. '  WHERE ( m.user_id='.$this->user_id.'' . "\n"
-. '    OR g.group_name=\'Everyone\')' . "\n"
+				. '    OR g.group_name=\'Everyone\')' . "\n"
-. '    ' . ( /* quick hack for upgrade compatibility reasons */ enano_version() == '1.0RC1' ? '' : 'AND ( m.pending != 1 OR m.pending IS NULL )' ) . '' . "\n"
+				. '    ' . ( /* quick hack for upgrade compatibility reasons */ enano_version() == '1.0RC1' ? '' : 'AND ( m.pending != 1 OR m.pending IS NULL )' ) . '' . "\n"
-. '  ORDER BY group_id ASC;'); // The ORDER BY is to make sure "Everyone" comes first so the permissions can be overridden
+				. '  ORDER BY group_id ASC;'); // The ORDER BY is to make sure "Everyone" comes first so the permissions can be overridden
-if($row = $db->fetchrow())
+			if($row = $db->fetchrow())
-{
+			{
-do {
+				do {
-$this->groups[$row['group_id']] = $row['group_name'];
+					$this->groups[$row['group_id']] = $row['group_name'];
-$this->group_mod[$row['group_id']] = ( intval($row['is_mod']) == 1 );
+					$this->group_mod[$row['group_id']] = ( intval($row['is_mod']) == 1 );
-} while($row = $db->fetchrow());
+				} while($row = $db->fetchrow());
-}
+			}
-else
+			else
-{
+			{
-die('No group info');
+				die('No group info');
-}
+			}
-profiler_log('Fetched group memberships');
+			profiler_log('Fetched group memberships');
-}
+		}
-// make sure we aren't banned
+		// make sure we aren't banned
-$this->check_banlist();
+		$this->check_banlist();
-// make sure the account is active
+		// make sure the account is active
-if ( !$this->compat && $this->user_logged_in && $userdata['account_active'] < 1 && !$this->on_critical_page() )
+		if ( !$this->compat && $this->user_logged_in && $userdata['account_active'] < 1 && !$this->on_critical_page() )
-{
+		{
-$this->show_inactive_error($userdata);
+			$this->show_inactive_error($userdata);
-}
+		}
-// Printable page view? Probably the wrong place to control
+		// Printable page view? Probably the wrong place to control
-// it but $template is pretty dumb, it will just about always
+		// it but $template is pretty dumb, it will just about always
-// do what you ask it to do, which isn't always what we want
+		// do what you ask it to do, which isn't always what we want
-if ( isset ( $_GET['printable'] ) )
+		if ( isset ( $_GET['printable'] ) )
-{
+		{
-$this->theme = 'printable';
+			$this->theme = 'printable';
-$this->style = 'default';
+			$this->style = 'default';
-}
+		}
-// setup theme ACLs
+		// setup theme ACLs
-$template->process_theme_acls();
+		$template->process_theme_acls();
-profiler_log('Sessions started. Banlist and theme ACLs initialized');
+		profiler_log('Sessions started. Banlist and theme ACLs initialized');
-}
+	}
-# Logins
+	# Logins
-/**
+	/**
-* Attempts to perform a login using crypto functions
+	* Attempts to perform a login using crypto functions
-* @param string $username The username
+	* @param string $username The username
-* @param string $aes_data The encrypted password, hex-encoded
+	* @param string $aes_data The encrypted password, hex-encoded
-* @param string $aes_key The MD5 hash of the encryption key, hex-encoded
+	* @param string $aes_key The MD5 hash of the encryption key, hex-encoded
-* @param string $challenge The 256-bit MD5 challenge string - first 128 bits should be the hash, the last 128 should be the challenge salt
+	* @param string $challenge The 256-bit MD5 challenge string - first 128 bits should be the hash, the last 128 should be the challenge salt
-* @param int $level The privilege level we're authenticating for, defaults to 0
+	* @param int $level The privilege level we're authenticating for, defaults to 0
-* @param string $captcha_hash Optional. If we're locked out and the lockout policy is captcha, this should be the identifier for the code.
+	* @param string $captcha_hash Optional. If we're locked out and the lockout policy is captcha, this should be the identifier for the code.
-* @param string $captcha_code Optional. If we're locked out and the lockout policy is captcha, this should be the code the user entered.
+	* @param string $captcha_code Optional. If we're locked out and the lockout policy is captcha, this should be the code the user entered.
-* @param bool $remember Optional. If true, remembers the session for X days. Otherwise, assigns a short session. Defaults to false.
+	* @param bool $remember Optional. If true, remembers the session for X days. Otherwise, assigns a short session. Defaults to false.
-* @param bool $lookup_key Optional. If true (default) this queries the database for the "real" encryption key. Else, uses what is given.
+	* @param bool $lookup_key Optional. If true (default) this queries the database for the "real" encryption key. Else, uses what is given.
-* @return string 'success' on success, or error string on failure
+	* @return string 'success' on success, or error string on failure
-*/
+	*/
-function login_with_crypto($username, $aes_data, $aes_key_id, $challenge, $level = USER_LEVEL_MEMBER, $captcha_hash = false, $captcha_code = false, $remember = false, $lookup_key = true)
+	function login_with_crypto($username, $aes_data, $aes_key_id, $challenge, $level = USER_LEVEL_MEMBER, $captcha_hash = false, $captcha_code = false, $remember = false, $lookup_key = true)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Instanciate the Rijndael encryption object
+		// Instanciate the Rijndael encryption object
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-// Fetch our decryption key
+		// Fetch our decryption key
-if ( $lookup_key )
+		if ( $lookup_key )
-{
+		{
-$aes_key = $this->fetch_public_key($aes_key_id);
+			$aes_key = $this->fetch_public_key($aes_key_id);
-if ( !$aes_key )
+			if ( !$aes_key )
-{
+			{
-// It could be that our key cache is full. If it seems larger than 65KB, clear it
+				// It could be that our key cache is full. If it seems larger than 65KB, clear it
-if ( strlen(getConfig('login_key_cache')) > 65000 )
+				if ( strlen(getConfig('login_key_cache')) > 65000 )
-{
+				{
-setConfig('login_key_cache', '');
+					setConfig('login_key_cache', '');
-return array(
+					return array(
-'success' => false,
+						'success' => false,
-'error' => 'key_not_found_cleared',
+						'error' => 'key_not_found_cleared',
-);
+						);
-}
+				}
-return array(
+				return array(
-'success' => false,
+					'success' => false,
-'error' => 'key_not_found'
+					'error' => 'key_not_found'
-);
+					);
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-$aes_key =& $aes_key_id;
+			$aes_key =& $aes_key_id;
-}
+		}
-// Convert the key to a binary string
+		// Convert the key to a binary string
-$bin_key = hexdecode($aes_key);
+		$bin_key = hexdecode($aes_key);
-if(strlen($bin_key) != AES_BITS / 8)
+		if(strlen($bin_key) != AES_BITS / 8)
-return array(
+			return array(
-'success' => false,
+				'success' => false,
-'error' => 'key_wrong_length'
+				'error' => 'key_wrong_length'
-);
+				);
-// Decrypt our password
+		// Decrypt our password
-$password = $aes->decrypt($aes_data, $bin_key, ENC_HEX);
+		$password = $aes->decrypt($aes_data, $bin_key, ENC_HEX);
-// Let the LoginAPI do the rest.
+		// Let the LoginAPI do the rest.
-return $this->login_without_crypto($username, $password, false, $level, $captcha_hash, $captcha_code, $remember);
+		return $this->login_without_crypto($username, $password, false, $level, $captcha_hash, $captcha_code, $remember);
-}
+	}
-/**
+	/**
-* Attempts to login without using crypto stuff, mainly for use when the other side doesn't like Javascript
+	* Attempts to login without using crypto stuff, mainly for use when the other side doesn't like Javascript
-* This method of authentication is inherently insecure, there's really nothing we can do about it except hope and pray that everyone moves to Firefox
+	* This method of authentication is inherently insecure, there's really nothing we can do about it except hope and pray that everyone moves to Firefox
-* Technically it still uses crypto, but it only decrypts the password already stored, which is (obviously) required for authentication
+	* Technically it still uses crypto, but it only decrypts the password already stored, which is (obviously) required for authentication
-* @param string $username The username
+	* @param string $username The username
-* @param string $password The password -OR- the MD5 hash of the password if $already_md5ed is true
+	* @param string $password The password -OR- the MD5 hash of the password if $already_md5ed is true
-* @param bool $already_md5ed This should be set to true if $password is an MD5 hash, and should be false if it's plaintext. Defaults to false.
+	* @param bool $already_md5ed This should be set to true if $password is an MD5 hash, and should be false if it's plaintext. Defaults to false.
-* @param int $level The privilege level we're authenticating for, defaults to 0
+	* @param int $level The privilege level we're authenticating for, defaults to 0
-* @param bool $remember Optional. If true, remembers the session for X days. Otherwise, assigns a short session. Defaults to false.
+	* @param bool $remember Optional. If true, remembers the session for X days. Otherwise, assigns a short session. Defaults to false.
-*/
+	*/
-function login_without_crypto($username, $password, $already_md5ed = false, $level = USER_LEVEL_MEMBER, $remember = false)
+	function login_without_crypto($username, $password, $already_md5ed = false, $level = USER_LEVEL_MEMBER, $remember = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( $already_md5ed )
+		if ( $already_md5ed )
-{
+		{
-// No longer supported
+			// No longer supported
-return array(
+			return array(
-'mode' => 'error',
+					'mode' => 'error',
-'error' => '$already_md5ed is no longer supported (set this parameter to false and make sure the password you send to $session->login_without_crypto() is not hashed)'
+					'error' => '$already_md5ed is no longer supported (set this parameter to false and make sure the password you send to $session->login_without_crypto() is not hashed)'
-);
+				);
-}
+		}
-// Replace underscores with spaces in username
+		// Replace underscores with spaces in username
-// (Added in 1.0.2)
+		// (Added in 1.0.2)
-$username = str_replace('_', ' ', $username);
+		$username = str_replace('_', ' ', $username);
-// Perhaps we're upgrading Enano?
+		// Perhaps we're upgrading Enano?
-if($this->compat)
+		if($this->compat)
-{
+		{
-return $this->login_compat($username, md5($password), $level);
+			return $this->login_compat($username, md5($password), $level);
-}
+		}
-// Instanciate the Rijndael encryption object
+		// Instanciate the Rijndael encryption object
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-// Initialize our success switch
+		// Initialize our success switch
-$success = false;
+		$success = false;
-// Retrieve the real password from the database
+		// Retrieve the real password from the database
-$username_db = $db->escape(strtolower($username));
+		$username_db = $db->escape(strtolower($username));
-$username_db_upper = $db->escape($username);
+		$username_db_upper = $db->escape($username);
-if ( !$db->sql_query('SELECT password,password_salt,old_encryption,user_id,user_level,temp_password,temp_password_time FROM '.table_prefix."users\n"
+		if ( !$db->sql_query('SELECT password,password_salt,old_encryption,user_id,user_level,temp_password,temp_password_time FROM '.table_prefix."users\n"
-. "  WHERE ( " . ENANO_SQLFUNC_LOWERCASE . "(username) = '$username_db' OR username = '$username_db_upper' );") )
+											. "  WHERE ( " . ENANO_SQLFUNC_LOWERCASE . "(username) = '$username_db' OR username = '$username_db_upper' );") )
-{
+		{
-$this->sql('SELECT password,\'\' AS password_salt,old_encryption,user_id,user_level,temp_password,temp_password_time FROM '.table_prefix."users\n"
+			$this->sql('SELECT password,\'\' AS password_salt,old_encryption,user_id,user_level,temp_password,temp_password_time FROM '.table_prefix."users\n"
-. "  WHERE ( " . ENANO_SQLFUNC_LOWERCASE . "(username) = '$username_db' OR username = '$username_db_upper' );");
+							. "  WHERE ( " . ENANO_SQLFUNC_LOWERCASE . "(username) = '$username_db' OR username = '$username_db_upper' );");
-}
+		}
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-{
+		{
-// This wasn't logged in <1.0.2, dunno how it slipped through
+			// This wasn't logged in <1.0.2, dunno how it slipped through
-if ( $level > USER_LEVEL_MEMBER )
+			if ( $level > USER_LEVEL_MEMBER )
-$this->sql('INSERT INTO ' . table_prefix . "logs(log_type,action,time_id,date_string,author,edit_summary,page_text) VALUES\n"
+				$this->sql('INSERT INTO ' . table_prefix . "logs(log_type,action,time_id,date_string,author,edit_summary,page_text) VALUES\n"
-. '  (\'security\', \'admin_auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', '
+									. '  (\'security\', \'admin_auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', '
-. '\''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
+											. '\''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
-else
+			else
-$this->sql('INSERT INTO ' . table_prefix . "logs(log_type,action,time_id,date_string,author,edit_summary) VALUES\n"
+				$this->sql('INSERT INTO ' . table_prefix . "logs(log_type,action,time_id,date_string,author,edit_summary) VALUES\n"
-. '  (\'security\', \'auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', '
+									. '  (\'security\', \'auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', '
-. '\''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
+											. '\''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
-// Do we also need to increment the lockout countdown?
+			// Do we also need to increment the lockout countdown?
-if ( !defined('IN_ENANO_INSTALL') )
+			if ( !defined('IN_ENANO_INSTALL') )
-$lockout_data = $this->get_lockout_info();
+				$lockout_data = $this->get_lockout_info();
-else
+			else
-$lockout_data = array(
+				$lockout_data = array(
-'lockout_policy' => 'disable'
+					'lockout_policy' => 'disable'
-);
+					);
-if ( $lockout_data['policy'] != 'disable' && !defined('IN_ENANO_INSTALL') )
+			if ( $lockout_data['policy'] != 'disable' && !defined('IN_ENANO_INSTALL') )
-{
+			{
-$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
+				$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
-// increment fail count
+				// increment fail count
-$this->sql('INSERT INTO '.table_prefix.'lockout(ipaddr, timestamp, action, username) VALUES(\'' . $ipaddr . '\', ' . time() . ', \'credential\', \'' . $db->escape($username) . '\');');
+				$this->sql('INSERT INTO '.table_prefix.'lockout(ipaddr, timestamp, action, username) VALUES(\'' . $ipaddr . '\', ' . time() . ', \'credential\', \'' . $db->escape($username) . '\');');
-$lockout_data['fails']++;
+				$lockout_data['fails']++;
-return array(
+				return array(
-'success' => false,
+						'success' => false,
-'error' => ( $lockout_data['fails'] >= $lockout_data['threshold'] ) ? 'locked_out' : 'invalid_credentials',
+						'error' => ( $lockout_data['fails'] >= $lockout_data['threshold'] ) ? 'locked_out' : 'invalid_credentials',
-'lockout_threshold' => $lockout_data['threshold'],
+						'lockout_threshold' => $lockout_data['threshold'],
-'lockout_duration' => ( $lockout_data['duration'] ),
+						'lockout_duration' => ( $lockout_data['duration'] ),
-'lockout_fails' => $lockout_data['fails'],
+						'lockout_fails' => $lockout_data['fails'],
-'lockout_policy' => $lockout_data['policy']
+						'lockout_policy' => $lockout_data['policy']
-);
+					);
-}
+			}
-return array(
+			return array(
-'success' => false,
+				'success' => false,
-'error' => 'invalid_credentials'
+				'error' => 'invalid_credentials'
-);
+			);
-}
+		}
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-// Check to see if we're logging in using a temporary password
+		// Check to see if we're logging in using a temporary password
-if((intval($row['temp_password_time']) + 3600*24) > time() )
+		if((intval($row['temp_password_time']) + 3600*24) > time() )
-{
+		{
-$temp_pass = hmac_sha1($password, $row['password_salt']);
+			$temp_pass = hmac_sha1($password, $row['password_salt']);
-if( $temp_pass === $row['temp_password'] )
+			if( $temp_pass === $row['temp_password'] )
-{
+			{
-$code = $plugins->setHook('login_password_reset');
+				$code = $plugins->setHook('login_password_reset');
-foreach ( $code as $cmd )
+				foreach ( $code as $cmd )
-{
+				{
-eval($cmd);
+					eval($cmd);
-}
+				}
-return array(
+				return array(
-'success' => false,
+						'success' => false,
-'error' => 'valid_reset',
+						'error' => 'valid_reset',
-'redirect_url' => makeUrlComplete('Special', 'PasswordReset/stage2/' . $row['user_id'] . '/' . $this->pk_encrypt($password))
+						'redirect_url' => makeUrlComplete('Special', 'PasswordReset/stage2/' . $row['user_id'] . '/' . $this->pk_encrypt($password))
-);
+					);
-}
+			}
-}
+		}
-if ( $row['old_encryption'] == 1 )
+		if ( $row['old_encryption'] == 1 )
-{
+		{
-// The user's password is stored using the obsolete and insecure MD5 algorithm - we'll update the field with the new password
+			// The user's password is stored using the obsolete and insecure MD5 algorithm - we'll update the field with the new password
-if(md5($password) === $row['password'])
+			if(md5($password) === $row['password'])
-{
+			{
-if ( !defined('IN_ENANO_UPGRADE') )
+				if ( !defined('IN_ENANO_UPGRADE') )
-{
+				{
-$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
+					$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
-$password_hmac = hmac_sha1($password, $hmac_secret);
+					$password_hmac = hmac_sha1($password, $hmac_secret);
-$this->sql('UPDATE '.table_prefix."users SET password = '$password_hmac', password_salt = '$hmac_secret', old_encryption = 0 WHERE user_id={$row['user_id']};");
+					$this->sql('UPDATE '.table_prefix."users SET password = '$password_hmac', password_salt = '$hmac_secret', old_encryption = 0 WHERE user_id={$row['user_id']};");
-}
+				}
-$success = true;
+				$success = true;
-}
+			}
-}
+		}
-else if ( $row['old_encryption'] == 2 || ( defined('ENANO_UPGRADE_USE_AES_PASSWORDS') ) && strlen($row['password']) != 40 )
+		else if ( $row['old_encryption'] == 2 || ( defined('ENANO_UPGRADE_USE_AES_PASSWORDS') ) && strlen($row['password']) != 40 )
-{
+		{
-// Our password field uses the 1.0RC1-1.1.5 encryption format
+			// Our password field uses the 1.0RC1-1.1.5 encryption format
-$real_pass = $aes->decrypt($row['password'], $this->private_key);
+			$real_pass = $aes->decrypt($row['password'], $this->private_key);
-if($password === $real_pass)
+			if($password === $real_pass)
-{
+			{
-if ( !defined('IN_ENANO_UPGRADE') )
+				if ( !defined('IN_ENANO_UPGRADE') )
-{
+				{
-$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
+					$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
-$password_hmac = hmac_sha1($password, $hmac_secret);
+					$password_hmac = hmac_sha1($password, $hmac_secret);
-$this->sql('UPDATE '.table_prefix."users SET password = '$password_hmac', password_salt = '$hmac_secret', old_encryption = 0 WHERE user_id={$row['user_id']};");
+					$this->sql('UPDATE '.table_prefix."users SET password = '$password_hmac', password_salt = '$hmac_secret', old_encryption = 0 WHERE user_id={$row['user_id']};");
-}
+				}
-$success = true;
+				$success = true;
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-// Password uses HMAC-SHA1
+			// Password uses HMAC-SHA1
-$user_challenge = hmac_sha1($password, $row['password_salt']);
+			$user_challenge = hmac_sha1($password, $row['password_salt']);
-$password_hmac =& $row['password'];
+			$password_hmac =& $row['password'];
-if ( $user_challenge === $password_hmac )
+			if ( $user_challenge === $password_hmac )
-{
+			{
-$success = true;
+				$success = true;
-}
+			}
-}
+		}
-if($success)
+		if($success)
-{
+		{
-if((int)$level > (int)$row['user_level'])
+			if((int)$level > (int)$row['user_level'])
-return array(
+				return array(
-'success' => false,
+					'success' => false,
-'error' => 'too_big_for_britches'
+					'error' => 'too_big_for_britches'
-);
+				);
-// grant session
+			// grant session
-$sess = $this->register_session($row['user_id'], $username, ( isset($password_hmac) ? $password_hmac : $password ), $level, $remember);
+			$sess = $this->register_session($row['user_id'], $username, ( isset($password_hmac) ? $password_hmac : $password ), $level, $remember);
-if($sess)
+			if($sess)
-{
+			{
-if($level > USER_LEVEL_MEMBER)
+				if($level > USER_LEVEL_MEMBER)
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,author_uid,edit_summary,page_text) VALUES(\'security\', \'admin_auth_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', ' . $row['user_id'] . ', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
+					$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,author_uid,edit_summary,page_text) VALUES(\'security\', \'admin_auth_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', ' . $row['user_id'] . ', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
-else
+				else
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,author_uid,edit_summary) VALUES(\'security\', \'auth_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', ' . $row['user_id'] . ', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
+					$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,author_uid,edit_summary) VALUES(\'security\', \'auth_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', ' . $row['user_id'] . ', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
-$code = $plugins->setHook('login_success');
+				$code = $plugins->setHook('login_success');
-foreach ( $code as $cmd )
+				foreach ( $code as $cmd )
-{
+				{
-eval($cmd);
+					eval($cmd);
-}
+				}
-return array(
+				return array(
-'success' => true
+					'success' => true
-);
+					);
-}
+			}
-else
+			else
-return array(
+				return array(
-'success' => false,
+					'success' => false,
-'error' => 'backend_fail'
+					'error' => 'backend_fail'
-);
+				);
-}
+		}
-else
+		else
-{
+		{
-if($level > USER_LEVEL_MEMBER)
+			if($level > USER_LEVEL_MEMBER)
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary,page_text) VALUES(\'security\', \'admin_auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
+				$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary,page_text) VALUES(\'security\', \'admin_auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\', ' . intval($level) . ')');
-else
+			else
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
+				$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'auth_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($username).'\', \''.$db->escape($_SERVER['REMOTE_ADDR']).'\')');
-// Do we also need to increment the lockout countdown?
+			// Do we also need to increment the lockout countdown?
-if ( !defined('IN_ENANO_INSTALL') && getConfig('lockout_policy', 'lockout') !== 'disable' )
+			if ( !defined('IN_ENANO_INSTALL') && getConfig('lockout_policy', 'lockout') !== 'disable' )
-{
+			{
-$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
+				$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
-// increment fail count
+				// increment fail count
-$this->sql('INSERT INTO '.table_prefix.'lockout(ipaddr, timestamp, action, username) VALUES(\'' . $ipaddr . '\', ' . time() . ', \'credential\', \'' . $db->escape($username) . '\');');
+				$this->sql('INSERT INTO '.table_prefix.'lockout(ipaddr, timestamp, action, username) VALUES(\'' . $ipaddr . '\', ' . time() . ', \'credential\', \'' . $db->escape($username) . '\');');
-}
+			}
-return array(
+			return array(
-'success' => false,
+				'success' => false,
-'error' => 'invalid_credentials'
+				'error' => 'invalid_credentials'
-);
+			);
-}
+		}
-}
+	}
-/**
+	/**
-* Attempts to log in using the old table structure and algorithm. This is for upgrades from old 1.0.x releases.
+	* Attempts to log in using the old table structure and algorithm. This is for upgrades from old 1.0.x releases.
-* @param string $username
+	* @param string $username
-* @param string $password This should be an MD5 hash
+	* @param string $password This should be an MD5 hash
-* @return string 'success' if successful, or error message on failure
+	* @return string 'success' if successful, or error message on failure
-*/
+	*/
-function login_compat($username, $password, $level = 0)
+	function login_compat($username, $password, $level = 0)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$pass_hashed =& $password;
+		$pass_hashed =& $password;
-$this->sql('SELECT password,user_id,user_level FROM '.table_prefix.'users WHERE username=\''.$this->prepare_text($username).'\';');
+		$this->sql('SELECT password,user_id,user_level FROM '.table_prefix.'users WHERE username=\''.$this->prepare_text($username).'\';');
-if($db->numrows() < 1)
+		if($db->numrows() < 1)
-return 'The username and/or password is incorrect.';
+			return 'The username and/or password is incorrect.';
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-if($row['password'] == $password)
+		if($row['password'] == $password)
-{
+		{
-if((int)$level > (int)$row['user_level'])
+			if((int)$level > (int)$row['user_level'])
-return 'You are not authorized for this level of access.';
+				return 'You are not authorized for this level of access.';
-$sess = $this->register_session_compat(intval($row['user_id']), $username, $password, $level);
+			$sess = $this->register_session_compat(intval($row['user_id']), $username, $password, $level);
-if($sess)
+			if($sess)
-return 'success';
+				return 'success';
-else
+			else
-return 'Your login credentials were correct, but an internal error occured while registering the session key in the database.';
+				return 'Your login credentials were correct, but an internal error occured while registering the session key in the database.';
-}
+		}
-else
+		else
-{
+		{
-return 'The username and/or password is incorrect.';
+			return 'The username and/or password is incorrect.';
-}
+		}
-}
+	}
-/**
+	/**
-* Registers a session key in the database. This function *ASSUMES* that the username and password have already been validated!
+	* Registers a session key in the database. This function *ASSUMES* that the username and password have already been validated!
-* Basically the session key is a hex-encoded cookie (encrypted with the site's private key) that says "u=[username];p=[sha1 of password];s=[unique key id]"
+	* Basically the session key is a hex-encoded cookie (encrypted with the site's private key) that says "u=[username];p=[sha1 of password];s=[unique key id]"
-* @param int $user_id
+	* @param int $user_id
-* @param string $username
+	* @param string $username
-* @param string $password_hmac The HMAC of the user's password, right from the database
+	* @param string $password_hmac The HMAC of the user's password, right from the database
-* @param int $level The level of access to grant, defaults to USER_LEVEL_MEMBER
+	* @param int $level The level of access to grant, defaults to USER_LEVEL_MEMBER
-* @param bool $remember Whether the session should be long-term (true) or not (false). Defaults to short-term.
+	* @param bool $remember Whether the session should be long-term (true) or not (false). Defaults to short-term.
-* @return bool
+	* @return bool
-*/
+	*/
-function register_session($user_id, $username, $password_hmac, $level = USER_LEVEL_MEMBER, $remember = false)
+	function register_session($user_id, $username, $password_hmac, $level = USER_LEVEL_MEMBER, $remember = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Random key identifier
+		// Random key identifier
-$salt = '';
+		$salt = '';
-for ( $i = 0; $i < 32; $i++ )
+		for ( $i = 0; $i < 32; $i++ )
-{
+		{
-$salt .= chr(mt_rand(32, 126));
+			$salt .= chr(mt_rand(32, 126));
-}
+		}
-// Session key
+		// Session key
-if ( defined('ENANO_UPGRADE_USE_AES_PASSWORDS') )
+		if ( defined('ENANO_UPGRADE_USE_AES_PASSWORDS') )
-{
+		{
-$session_key = $this->pk_encrypt("u=$username;p=" . sha1($password_hmac) . ";s=$salt");
+			$session_key = $this->pk_encrypt("u=$username;p=" . sha1($password_hmac) . ";s=$salt");
-}
+		}
-else
+		else
-{
+		{
-$key_pieces = array($password_hmac);
+			$key_pieces = array($password_hmac);
-$sk_mode = 'generate';
+			$sk_mode = 'generate';
-$code = $plugins->setHook('session_key_calc');
+			$code = $plugins->setHook('session_key_calc');
-foreach ( $code as $cmd )
+			foreach ( $code as $cmd )
-{
+			{
-eval($cmd);
+				eval($cmd);
-}
+			}
-$key_pieces = implode("\xFF", $key_pieces);
+			$key_pieces = implode("\xFF", $key_pieces);
-$session_key = hmac_sha1($key_pieces, $salt);
+			$session_key = hmac_sha1($key_pieces, $salt);
-}
+		}
-// Minimum level
+		// Minimum level
-$level = max(array($level, USER_LEVEL_MEMBER));
+		$level = max(array($level, USER_LEVEL_MEMBER));
-// Type of key
+		// Type of key
-$key_type = ( $level > USER_LEVEL_MEMBER ) ? SK_ELEV : ( $remember ? SK_LONG : SK_SHORT );
+		$key_type = ( $level > USER_LEVEL_MEMBER ) ? SK_ELEV : ( $remember ? SK_LONG : SK_SHORT );
-// If we're registering an elevated-privilege key, it needs to be on GET
+		// If we're registering an elevated-privilege key, it needs to be on GET
-if($level > USER_LEVEL_MEMBER)
+		if($level > USER_LEVEL_MEMBER)
-{
+		{
-$this->sid_super = $session_key;
+			$this->sid_super = $session_key;
-$_GET['auth'] = $session_key;
+			$_GET['auth'] = $session_key;
-}
+		}
-else
+		else
-{
+		{
-// Stash it in a cookie
+			// Stash it in a cookie
-// For now, make the cookie last forever, we can change this in 1.1.x
+			// For now, make the cookie last forever, we can change this in 1.1.x
-setcookie( 'sid', $session_key, time()+15552000, scriptPath.'/', null, $GLOBALS['is_https']);
+			setcookie( 'sid', $session_key, time()+15552000, scriptPath.'/', null, $GLOBALS['is_https']);
-$_COOKIE['sid'] = $session_key;
+			$_COOKIE['sid'] = $session_key;
-$this->sid = $session_key;
+			$this->sid = $session_key;
-}
+		}
-// $keyhash is stored in the database, this is for compatibility with the older DB structure
+		// $keyhash is stored in the database, this is for compatibility with the older DB structure
-$keyhash = md5($session_key);
+		$keyhash = md5($session_key);
-// Record the user's IP
+		// Record the user's IP
-$ip = $_SERVER['REMOTE_ADDR'];
+		$ip = $_SERVER['REMOTE_ADDR'];
-if(!is_valid_ip($ip))
+		if(!is_valid_ip($ip))
-die('$session->register_session: Remote-Addr was spoofed');
+			die('$session->register_session: Remote-Addr was spoofed');
-// The time needs to be stashed to enforce the 15-minute limit on elevated session keys
+		// The time needs to be stashed to enforce the 15-minute limit on elevated session keys
-$time = time();
+		$time = time();
-// Sanity check
+		// Sanity check
-if(!is_int($user_id))
+		if(!is_int($user_id))
-die('Somehow an SQL injection attempt crawled into our session registrar! (1)');
+			die('Somehow an SQL injection attempt crawled into our session registrar! (1)');
-if(!is_int($level))
+		if(!is_int($level))
-die(var_dump($level) . '<br />Somehow an SQL injection attempt crawled into our session registrar! (2)');
+			die(var_dump($level) . '<br />Somehow an SQL injection attempt crawled into our session registrar! (2)');
-// Update RAM
+		// Update RAM
-$this->user_id = $user_id;
+		$this->user_id = $user_id;
-$this->user_level = max(array($this->user_level, $level));
+		$this->user_level = max(array($this->user_level, $level));
-// All done!
+		// All done!
-$query = $db->sql_query('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time, key_type) VALUES(\''.$keyhash.'\', \''.$db->escape($salt).'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.', ' . $key_type . ');');
+		$query = $db->sql_query('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time, key_type) VALUES(\''.$keyhash.'\', \''.$db->escape($salt).'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.', ' . $key_type . ');');
-if ( !$query && defined('IN_ENANO_UPGRADE') )
+		if ( !$query && defined('IN_ENANO_UPGRADE') )
-// we're trying to upgrade so the key_type column is probably missing - try it again without specifying the key type
+			// we're trying to upgrade so the key_type column is probably missing - try it again without specifying the key type
-$this->sql('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time) VALUES(\''.$keyhash.'\', \''.$db->escape($salt).'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.');');
+			$this->sql('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time) VALUES(\''.$keyhash.'\', \''.$db->escape($salt).'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.');');
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Identical to register_session in nature, but uses the old login/table structure. DO NOT use this except in the upgrade script under very controlled circumstances.
+	* Identical to register_session in nature, but uses the old login/table structure. DO NOT use this except in the upgrade script under very controlled circumstances.
-* @see sessionManager::register_session()
+	* @see sessionManager::register_session()
-* @access private
+	* @access private
-*/
+	*/
-function register_session_compat($user_id, $username, $password, $level = 0)
+	function register_session_compat($user_id, $username, $password, $level = 0)
-{
+	{
-$salt = md5(microtime() . mt_rand());
+		$salt = md5(microtime() . mt_rand());
-$thekey = md5($password . $salt);
+		$thekey = md5($password . $salt);
-if($level > 0)
+		if($level > 0)
-{
+		{
-$this->sid_super = $thekey;
+			$this->sid_super = $thekey;
-}
+		}
-else
+		else
-{
+		{
-setcookie( 'sid', $thekey, time()+315360000, scriptPath.'/' );
+			setcookie( 'sid', $thekey, time()+315360000, scriptPath.'/' );
-$_COOKIE['sid'] = $thekey;
+			$_COOKIE['sid'] = $thekey;
-}
+		}
-$ip = ip2hex($_SERVER['REMOTE_ADDR']);
+		$ip = ip2hex($_SERVER['REMOTE_ADDR']);
-if(!$ip)
+		if(!$ip)
-die('$session->register_session: Remote-Addr was spoofed');
+			die('$session->register_session: Remote-Addr was spoofed');
-$time = time();
+		$time = time();
-if(!is_int($user_id))
+		if(!is_int($user_id))
-die('Somehow an SQL injection attempt crawled into our session registrar! (1)');
+			die('Somehow an SQL injection attempt crawled into our session registrar! (1)');
-if(!is_int($level))
+		if(!is_int($level))
-die('Somehow an SQL injection attempt crawled into our session registrar! (2)');
+			die('Somehow an SQL injection attempt crawled into our session registrar! (2)');
-$query = $this->sql('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time) VALUES(\''.$thekey.'\', \''.$salt.'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.');');
+		$query = $this->sql('INSERT INTO '.table_prefix.'session_keys(session_key, salt, user_id, auth_level, source_ip, time) VALUES(\''.$thekey.'\', \''.$salt.'\', '.$user_id.', '.$level.', \''.$ip.'\', '.$time.');');
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Tells us if we're locked out from logging in or not.
+	* Tells us if we're locked out from logging in or not.
-* @param reference will be filled with information regarding in-progress lockout
+	* @param reference will be filled with information regarding in-progress lockout
-* @return bool True if locked out, false otherwise
+	* @return bool True if locked out, false otherwise
-*/
+	*/
-function get_lockout_info()
+	function get_lockout_info()
-{
+	{
-global $db;
+		global $db;
-// this has to be initialized to hide warnings
+		// this has to be initialized to hide warnings
-$lockdata = null;
+		$lockdata = null;
-// Query database for lockout info
+		// Query database for lockout info
-$locked_out = false;
+		$locked_out = false;
-$threshold = ( $_ = getConfig('lockout_threshold') ) ? intval($_) : 5;
+		$threshold = ( $_ = getConfig('lockout_threshold') ) ? intval($_) : 5;
-$duration  = ( $_ = getConfig('lockout_duration') ) ? intval($_) : 15;
+		$duration  = ( $_ = getConfig('lockout_duration') ) ? intval($_) : 15;
-// convert to seconds
+		// convert to seconds
-$duration  = $duration * 60;
+		$duration  = $duration * 60;
-// decide on policy
+		// decide on policy
-$policy = ( $x = getConfig('lockout_policy') && in_array(getConfig('lockout_policy'), array('lockout', 'disable', 'captcha')) ) ? getConfig('lockout_policy') : 'lockout';
+		$policy = ( $x = getConfig('lockout_policy') && in_array(getConfig('lockout_policy'), array('lockout', 'disable', 'captcha')) ) ? getConfig('lockout_policy') : 'lockout';
-if ( $policy != 'disable' )
+		if ( $policy != 'disable' )
-{
+		{
-// enabled; make decision
+			// enabled; make decision
-$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
+			$ipaddr = $db->escape($_SERVER['REMOTE_ADDR']);
-$timestamp_cutoff = time() - $duration;
+			$timestamp_cutoff = time() - $duration;
-$q = $this->sql('SELECT timestamp FROM ' . table_prefix . 'lockout WHERE timestamp > ' . $timestamp_cutoff . ' AND ipaddr = \'' . $ipaddr . '\' ORDER BY timestamp DESC;');
+			$q = $this->sql('SELECT timestamp FROM ' . table_prefix . 'lockout WHERE timestamp > ' . $timestamp_cutoff . ' AND ipaddr = \'' . $ipaddr . '\' ORDER BY timestamp DESC;');
-$fails = $db->numrows($q);
+			$fails = $db->numrows($q);
-$row = $db->fetchrow($q);
+			$row = $db->fetchrow($q);
-$locked_out = ( $fails >= $threshold );
+			$locked_out = ( $fails >= $threshold );
-$lockdata = array(
+			$lockdata = array(
-'active' => $locked_out,
+					'active' => $locked_out,
-'threshold' => $threshold,
+					'threshold' => $threshold,
-'duration' => ( $duration / 60 ),
+					'duration' => ( $duration / 60 ),
-'fails' => $fails,
+					'fails' => $fails,
-'policy' => $policy,
+					'policy' => $policy,
-'last_time' => $row['timestamp'],
+					'last_time' => $row['timestamp'],
-'time_rem' => $locked_out ? ( $duration / 60 ) - round( ( time() - $row['timestamp'] ) / 60 ) : 0,
+					'time_rem' => $locked_out ? ( $duration / 60 ) - round( ( time() - $row['timestamp'] ) / 60 ) : 0,
-'captcha' => $policy == 'captcha' ? $this->make_captcha() : ''
+					'captcha' => $policy == 'captcha' ? $this->make_captcha() : ''
-);
+				);
-$db->free_result();
+			$db->free_result();
-}
+		}
-else
+		else
-{
+		{
-// disabled; send back default dataset
+			// disabled; send back default dataset
-$lockdata = array(
+			$lockdata = array(
-'active' => false,
+				'active' => false,
-'threshold' => $threshold,
+				'threshold' => $threshold,
-'duration' => ( $duration / 60 ),
+				'duration' => ( $duration / 60 ),
-'fails' => 0,
+				'fails' => 0,
-'policy' => $policy,
+				'policy' => $policy,
-'last_time' => 0,
+				'last_time' => 0,
-'time_rem' => 0,
+				'time_rem' => 0,
-'captcha' => ''
+				'captcha' => ''
-);
+			);
-}
+		}
-return $lockdata;
+		return $lockdata;
-}
+	}
-/**
+	/**
-* Creates/restores a guest session
+	* Creates/restores a guest session
-* @todo implement real session management for guests
+	* @todo implement real session management for guests
-*/
+	*/
-function register_guest_session()
+	function register_guest_session()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-$this->username = $_SERVER['REMOTE_ADDR'];
+		$this->username = $_SERVER['REMOTE_ADDR'];
-$this->user_level = USER_LEVEL_GUEST;
+		$this->user_level = USER_LEVEL_GUEST;
-if($this->compat || defined('IN_ENANO_INSTALL'))
+		if($this->compat || defined('IN_ENANO_INSTALL'))
-{
+		{
-$this->theme = 'oxygen';
+			$this->theme = 'oxygen';
-$this->style = 'bleu';
+			$this->style = 'bleu';
-}
+		}
-else
+		else
-{
+		{
-$this->theme = ( isset($_GET['theme']) && isset($template->named_theme_list[$_GET['theme']])) ? $_GET['theme'] : $template->default_theme;
+			$this->theme = ( isset($_GET['theme']) && isset($template->named_theme_list[$_GET['theme']])) ? $_GET['theme'] : $template->default_theme;
-$this->style = ( isset($_GET['style']) && file_exists(ENANO_ROOT.'/themes/'.$this->theme . '/css/'.$_GET['style'].'.css' )) ? $_GET['style'] : preg_replace('/\.css$/', '', $template->named_theme_list[$this->theme]['default_style']);
+			$this->style = ( isset($_GET['style']) && file_exists(ENANO_ROOT.'/themes/'.$this->theme . '/css/'.$_GET['style'].'.css' )) ? $_GET['style'] : preg_replace('/\.css$/', '', $template->named_theme_list[$this->theme]['default_style']);
-}
+		}
-$this->user_id = 1;
+		$this->user_id = 1;
-// This is a VERY special case we are allowing. It lets the installer create languages using the Enano API.
+		// This is a VERY special case we are allowing. It lets the installer create languages using the Enano API.
-if ( !defined('ENANO_ALLOW_LOAD_NOLANG') )
+		if ( !defined('ENANO_ALLOW_LOAD_NOLANG') )
-{
+		{
-$language = ( isset($_GET['lang']) && preg_match('/^[a-z0-9-_]+$/', @$_GET['lang']) ) ? $_GET['lang'] : intval(getConfig('default_language'));
+			$language = ( isset($_GET['lang']) && preg_match('/^[a-z0-9-_]+$/', @$_GET['lang']) ) ? $_GET['lang'] : intval(getConfig('default_language'));
-$lang = new Language($language);
+			$lang = new Language($language);
-@setlocale(LC_ALL, $lang->lang_code);
+			@setlocale(LC_ALL, $lang->lang_code);
-}
+		}
-// make a CSRF token
+		// make a CSRF token
-$this->csrf_token = hmac_sha1($_SERVER['REMOTE_ADDR'], sha1($this->private_key));
+		$this->csrf_token = hmac_sha1($_SERVER['REMOTE_ADDR'], sha1($this->private_key));
-}
+	}
-/**
+	/**
-* Validates a session key, and returns the userdata associated with the key or false
+	* Validates a session key, and returns the userdata associated with the key or false
-* @param string $key The session key to validate
+	* @param string $key The session key to validate
-* @return array Keys are 'user_id', 'username', 'email', 'real_name', 'user_level', 'theme', 'style', 'signature', 'reg_time', 'account_active', 'activation_key', and 'auth_level' or bool false if validation failed. The key 'auth_level' is the maximum authorization level that this key provides.
+	* @return array Keys are 'user_id', 'username', 'email', 'real_name', 'user_level', 'theme', 'style', 'signature', 'reg_time', 'account_active', 'activation_key', and 'auth_level' or bool false if validation failed. The key 'auth_level' is the maximum authorization level that this key provides.
-*/
+	*/
-function validate_session($key)
+	function validate_session($key)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-profiler_log("SessionManager: checking session: " . sha1($key));
+		profiler_log("SessionManager: checking session: " . sha1($key));
-if ( strlen($key) > 48 )
+		if ( strlen($key) > 48 )
-{
+		{
-return $this->validate_aes_session($key);
+			return $this->validate_aes_session($key);
-}
+		}
-profiler_log("SessionManager: checking session: " . $key);
+		profiler_log("SessionManager: checking session: " . $key);
-return $this->validate_session_shared($key, '');
+		return $this->validate_session_shared($key, '');
-}
+	}
-/**
+	/**
-* Validates an old-format AES session key. DO NOT USE THIS. Will return false if called outside of an upgrade.
+	* Validates an old-format AES session key. DO NOT USE THIS. Will return false if called outside of an upgrade.
-* @param string Session key
+	* @param string Session key
-* @return array
+	* @return array
-*/
+	*/
-protected function validate_aes_session($key)
+	protected function validate_aes_session($key)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// No valid use except during upgrades
+		// No valid use except during upgrades
-if ( !preg_match('/^upg-/', enano_version()) && !defined('IN_ENANO_UPGRADE') )
+		if ( !preg_match('/^upg-/', enano_version()) && !defined('IN_ENANO_UPGRADE') )
-return false;
+			return false;
-$decrypted_key = $this->pk_decrypt($key);
+		$decrypted_key = $this->pk_decrypt($key);
-if ( !$decrypted_key )
+		if ( !$decrypted_key )
-{
+		{
-// die_semicritical('AES encryption error', '<p>Something went wrong during the AES decryption process.</p><pre>'.print_r($decrypted_key, true).'</pre>');
+			// die_semicritical('AES encryption error', '<p>Something went wrong during the AES decryption process.</p><pre>'.print_r($decrypted_key, true).'</pre>');
-return false;
+			return false;
-}
+		}
-$n = preg_match('/^u='.$this->valid_username.';p=([A-Fa-f0-9]+?);s=(.{32})$/', $decrypted_key, $keydata);
+		$n = preg_match('/^u='.$this->valid_username.';p=([A-Fa-f0-9]+?);s=(.{32})$/', $decrypted_key, $keydata);
-if($n < 1)
+		if($n < 1)
-{
+		{
-echo '(debug) $session->validate_session: Key does not match regex<br />Decrypted key: '.$decrypted_key;
+			echo '(debug) $session->validate_session: Key does not match regex<br />Decrypted key: '.$decrypted_key;
-return false;
+			return false;
-}
+		}
-$keyhash = md5($key);
+		$keyhash = md5($key);
-$salt = $db->escape($keydata[3]);
+		$salt = $db->escape($keydata[3]);
-return $this->validate_session_shared($keyhash, $salt, true);
+		return $this->validate_session_shared($keyhash, $salt, true);
-}
+	}
-/**
+	/**
-* Shared portion of session validation. Do not try to call this.
+	* Shared portion of session validation. Do not try to call this.
-* @return array
+	* @return array
-* @access private
+	* @access private
-*/
+	*/
-protected function validate_session_shared($key, $salt, $loose_call = false)
+	protected function validate_session_shared($key, $salt, $loose_call = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// using a normal call to $db->sql_query to avoid failing on errors here
+		// using a normal call to $db->sql_query to avoid failing on errors here
-$columns_select  = "u.user_id AS uid, u.username, u.password, u.password_salt, u.email, u.real_name, u.user_level, u.theme,\n"
+		$columns_select  = "u.user_id AS uid, u.username, u.password, u.password_salt, u.email, u.real_name, u.user_level, u.theme,\n"
-. "  u.style,u.signature, u.reg_time, u.account_active, u.activation_key, u.user_lang, u.user_title, k.salt, k.source_ip,\n"
+											. "  u.style,u.signature, u.reg_time, u.account_active, u.activation_key, u.user_lang, u.user_title, k.salt, k.source_ip,\n"
-. "  k.time, k.auth_level, k.key_type, COUNT(p.message_id) AS num_pms, u.user_timezone, u.user_dst, x.*";
+											. "  k.time, k.auth_level, k.key_type, COUNT(p.message_id) AS num_pms, u.user_timezone, u.user_dst, x.*";
-$columns_groupby = "u.user_id, u.username, u.password, u.password_salt, u.email, u.real_name, u.user_level, u.theme, u.style, u.signature,\n"
+		$columns_groupby = "u.user_id, u.username, u.password, u.password_salt, u.email, u.real_name, u.user_level, u.theme, u.style, u.signature,\n"
-. "           u.reg_time, u.account_active, u.activation_key, u.user_lang, u.user_timezone, u.user_title, u.user_dst,\n"
+											. "           u.reg_time, u.account_active, u.activation_key, u.user_lang, u.user_timezone, u.user_title, u.user_dst,\n"
-. "           k.salt, k.source_ip, k.time, k.auth_level, k.key_type, x.user_id, x.user_aim, x.user_yahoo, x.user_msn,\n"
+											. "           k.salt, k.source_ip, k.time, k.auth_level, k.key_type, x.user_id, x.user_aim, x.user_yahoo, x.user_msn,\n"
-. "           x.user_xmpp, x.user_homepage, x.user_location, x.user_job, x.user_hobbies, x.email_public,\n"
+											. "           x.user_xmpp, x.user_homepage, x.user_location, x.user_job, x.user_hobbies, x.email_public,\n"
-. "           x.disable_js_fx, x.date_format, x.time_format";
+											. "           x.disable_js_fx, x.date_format, x.time_format";
-$joins = "  LEFT JOIN " . table_prefix . "users AS u\n"
+		$joins = "  LEFT JOIN " . table_prefix . "users AS u\n"
-. "    ON ( u.user_id=k.user_id )\n"
+						. "    ON ( u.user_id=k.user_id )\n"
-. "  LEFT JOIN " . table_prefix . "users_extra AS x\n"
+						. "  LEFT JOIN " . table_prefix . "users_extra AS x\n"
-. "    ON ( u.user_id=x.user_id OR x.user_id IS NULL )\n"
+						. "    ON ( u.user_id=x.user_id OR x.user_id IS NULL )\n"
-. "  LEFT JOIN " . table_prefix . "privmsgs AS p\n"
+						. "  LEFT JOIN " . table_prefix . "privmsgs AS p\n"
-. "    ON ( p.message_to=u.username AND p.message_read=0 )\n";
+						. "    ON ( p.message_to=u.username AND p.message_read=0 )\n";
-if ( !$loose_call )
+		if ( !$loose_call )
-{
+		{
-$key_md5 = md5($key);
+			$key_md5 = md5($key);
-$query = $db->sql_query("SELECT $columns_select\n"
+			$query = $db->sql_query("SELECT $columns_select\n"
-. "FROM " . table_prefix . "session_keys AS k\n"
+														. "FROM " . table_prefix . "session_keys AS k\n"
-. $joins
+														. $joins
-. "  WHERE k.session_key='$key_md5'\n"
+														. "  WHERE k.session_key='$key_md5'\n"
-. "  GROUP BY $columns_groupby;");
+														. "  GROUP BY $columns_groupby;");
-}
+		}
-else
+		else
-{
+		{
-$query = $db->sql_query("SELECT $columns_select\n"
+			$query = $db->sql_query("SELECT $columns_select\n"
-. "FROM " . table_prefix . "session_keys AS k\n"
+														. "FROM " . table_prefix . "session_keys AS k\n"
-. $joins
+														. $joins
-. "  WHERE k.session_key='$key'\n"
+														. "  WHERE k.session_key='$key'\n"
-. "    AND k.salt='$salt'\n"
+														. "    AND k.salt='$salt'\n"
-. "  GROUP BY $columns_groupby;");
+														. "  GROUP BY $columns_groupby;");
-}
+		}
-if ( !$query && ( defined('IN_ENANO_INSTALL') or defined('IN_ENANO_UPGRADE') ) )
+		if ( !$query && ( defined('IN_ENANO_INSTALL') or defined('IN_ENANO_UPGRADE') ) )
-{
+		{
-$key_md5 = $loose_call ? $key : md5($key);
+			$key_md5 = $loose_call ? $key : md5($key);
-$query = $this->sql('SELECT u.user_id AS uid,u.username,u.password,\'\' AS password_salt,u.email,u.real_name,u.user_level,u.theme,u.style,u.signature,u.reg_time,u.account_active,u.activation_key,k.source_ip,k.time,k.auth_level,COUNT(p.message_id) AS num_pms, 1440 AS user_timezone, \'0;0;0;0;60\' AS user_dst, ' . SK_SHORT . ' AS key_type, k.salt FROM '.table_prefix.'session_keys AS k
+			$query = $this->sql('SELECT u.user_id AS uid,u.username,u.password,\'\' AS password_salt,u.email,u.real_name,u.user_level,u.theme,u.style,u.signature,u.reg_time,u.account_active,u.activation_key,k.source_ip,k.time,k.auth_level,COUNT(p.message_id) AS num_pms, 1440 AS user_timezone, \'0;0;0;0;60\' AS user_dst, ' . SK_SHORT . ' AS key_type, k.salt FROM '.table_prefix.'session_keys AS k
-LEFT JOIN '.table_prefix.'users AS u
+														LEFT JOIN '.table_prefix.'users AS u
-ON ( u.user_id=k.user_id )
+															ON ( u.user_id=k.user_id )
-LEFT JOIN '.table_prefix.'privmsgs AS p
+														LEFT JOIN '.table_prefix.'privmsgs AS p
-ON ( p.message_to=u.username AND p.message_read=0 )
+															ON ( p.message_to=u.username AND p.message_read=0 )
-WHERE k.session_key=\''.$key_md5.'\'
+														WHERE k.session_key=\''.$key_md5.'\'
-GROUP BY u.user_id,u.username,u.password,u.email,u.real_name,u.user_level,u.theme,u.style,u.signature,u.reg_time,u.account_active,u.activation_key,k.source_ip,k.time,k.auth_level,k.salt;');
+														GROUP BY u.user_id,u.username,u.password,u.email,u.real_name,u.user_level,u.theme,u.style,u.signature,u.reg_time,u.account_active,u.activation_key,k.source_ip,k.time,k.auth_level,k.salt;');
-}
+		}
-else if ( !$query )
+		else if ( !$query )
-{
+		{
-$db->_die();
+			$db->_die();
-}
+		}
-if($db->numrows() < 1)
+		if($db->numrows() < 1)
-{
+		{
-// echo '(debug) $session->validate_session: Key was not found in database: ' . $key_md5 . '<br />';
+			// echo '(debug) $session->validate_session: Key was not found in database: ' . $key_md5 . '<br />';
-return false;
+			return false;
-}
+		}
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-profiler_log("SessionManager: session check: selected and fetched results");
+		profiler_log("SessionManager: session check: selected and fetched results");
-$row['user_id'] =& $row['uid'];
+		$row['user_id'] =& $row['uid'];
-$ip = $_SERVER['REMOTE_ADDR'];
+		$ip = $_SERVER['REMOTE_ADDR'];
-if($row['auth_level'] > $row['user_level'])
+		if($row['auth_level'] > $row['user_level'])
-{
+		{
-// Failed authorization check
+			// Failed authorization check
-// echo '(debug) $session->validate_session: access to this auth level denied<br />';
+			// echo '(debug) $session->validate_session: access to this auth level denied<br />';
-return false;
+			return false;
-}
+		}
-if($ip != $row['source_ip'])
+		if($ip != $row['source_ip'])
-{
+		{
-// Special exception for 1.1.x upgrade - the 1.1.3 upgrade changes the size of the column and this is what validate_session
+			// Special exception for 1.1.x upgrade - the 1.1.3 upgrade changes the size of the column and this is what validate_session
-// expects, but if the column size hasn't changed yet just check the first 10 digits of the IP.
+			// expects, but if the column size hasn't changed yet just check the first 10 digits of the IP.
-$fail = true;
+			$fail = true;
-if ( defined('IN_ENANO_UPGRADE') )
+			if ( defined('IN_ENANO_UPGRADE') )
-{
+			{
-if ( substr($ip, 0, 10) == substr($row['source_ip'], 0, 10) )
+				if ( substr($ip, 0, 10) == substr($row['source_ip'], 0, 10) )
-$fail = false;
+					$fail = false;
-}
+			}
-// Failed IP address check
+			// Failed IP address check
-// echo '(debug) $session->validate_session: IP address mismatch<br />';
+			// echo '(debug) $session->validate_session: IP address mismatch<br />';
-if ( $fail )
+			if ( $fail )
-return false;
+				return false;
-}
+		}
-// $loose_call is turned on only from validate_aes_session
+		// $loose_call is turned on only from validate_aes_session
-if ( !$loose_call )
+		if ( !$loose_call )
-{
+		{
-$key_pieces = array($row['password']);
+			$key_pieces = array($row['password']);
-$user_id =& $row['uid'];
+			$user_id =& $row['uid'];
-$sk_mode = 'validate';
+			$sk_mode = 'validate';
-$code = $plugins->setHook('session_key_calc');
+			$code = $plugins->setHook('session_key_calc');
-foreach ( $code as $cmd )
+			foreach ( $code as $cmd )
-{
+			{
-eval($cmd);
+				eval($cmd);
-}
+			}
-$key_pieces = implode("\xFF", $key_pieces);
+			$key_pieces = implode("\xFF", $key_pieces);
-$correct_key = hexdecode(hmac_sha1($key_pieces, $row['salt']));
+			$correct_key = hexdecode(hmac_sha1($key_pieces, $row['salt']));
-$user_key = hexdecode($key);
+			$user_key = hexdecode($key);
-if ( $correct_key !== $user_key || !is_string($user_key) )
+			if ( $correct_key !== $user_key || !is_string($user_key) )
-{
+			{
-return false;
+				return false;
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-// if this is a "loose call", this only works once (during the final upgrade stage). Destroy the contents of session_keys.
+			// if this is a "loose call", this only works once (during the final upgrade stage). Destroy the contents of session_keys.
-if ( $row['auth_level'] == USER_LEVEL_ADMIN && preg_match('/^upg-/', enano_version()) )
+			if ( $row['auth_level'] == USER_LEVEL_ADMIN && preg_match('/^upg-/', enano_version()) )
-$this->sql('DELETE FROM ' . table_prefix . "session_keys;");
+				$this->sql('DELETE FROM ' . table_prefix . "session_keys;");
-}
+		}
-// timestamp check
+		// timestamp check
-switch ( $row['key_type'] )
+		switch ( $row['key_type'] )
-{
+		{
-case SK_SHORT:
+			case SK_SHORT:
-$time_now = time();
+				$time_now = time();
-$time_key = $row['time'] + ( 60 * intval(getConfig('session_short', '720')) );
+				$time_key = $row['time'] + ( 60 * intval(getConfig('session_short', '720')) );
-if ( $time_now > $time_key )
+				if ( $time_now > $time_key )
-{
+				{
-// Session timed out
+					// Session timed out
-return false;
+					return false;
-}
+				}
-break;
+				break;
-case SK_LONG:
+			case SK_LONG:
-if ( intval(getConfig('session_remember_time', '0')) === 0 )
+				if ( intval(getConfig('session_remember_time', '0')) === 0 )
-{
+				{
-// sessions last infinitely, timestamp validation is therefore successful
+					// sessions last infinitely, timestamp validation is therefore successful
-break;
+					break;
-}
+				}
-$time_now = time();
+				$time_now = time();
-$time_key = $row['time'] + ( 86400 * intval(getConfig('session_remember_time', '30')) );
+				$time_key = $row['time'] + ( 86400 * intval(getConfig('session_remember_time', '30')) );
-if ( $time_now > $time_key )
+				if ( $time_now > $time_key )
-{
+				{
-// Session timed out
+					// Session timed out
-return false;
+					return false;
-}
+				}
-break;
+				break;
-case SK_ELEV:
+			case SK_ELEV:
-$time_now = time();
+				$time_now = time();
-$time_key = $row['time'] + 900;
+				$time_key = $row['time'] + 900;
-if($time_now > $time_key && $row['auth_level'] > USER_LEVEL_MEMBER)
+				if($time_now > $time_key && $row['auth_level'] > USER_LEVEL_MEMBER)
-{
+				{
-// Session timed out
+					// Session timed out
-// echo '(debug) $session->validate_session: super session timed out<br />';
+					// echo '(debug) $session->validate_session: super session timed out<br />';
-$this->sw_timed_out = true;
+					$this->sw_timed_out = true;
-return false;
+					return false;
-}
+				}
-break;
+				break;
-}
+		}
-// If this is an elevated-access or short-term session key, update the time
+		// If this is an elevated-access or short-term session key, update the time
-if( $row['key_type'] == SK_ELEV || $row['key_type'] == SK_SHORT )
+		if( $row['key_type'] == SK_ELEV || $row['key_type'] == SK_SHORT )
-{
+		{
-$this->sql('UPDATE '.table_prefix.'session_keys SET time='.time().' WHERE session_key=\''.md5($key).'\';');
+			$this->sql('UPDATE '.table_prefix.'session_keys SET time='.time().' WHERE session_key=\''.md5($key).'\';');
-}
+		}
-$user_extra = array();
+		$user_extra = array();
-foreach ( array('user_aim', 'user_yahoo', 'user_msn', 'user_xmpp', 'user_homepage', 'user_location', 'user_job', 'user_hobbies', 'email_public', 'disable_js_fx') as $column )
+		foreach ( array('user_aim', 'user_yahoo', 'user_msn', 'user_xmpp', 'user_homepage', 'user_location', 'user_job', 'user_hobbies', 'email_public', 'disable_js_fx') as $column )
-{
+		{
-if ( isset($row[$column]) )
+			if ( isset($row[$column]) )
-$user_extra[$column] = $row[$column];
+				$user_extra[$column] = $row[$column];
-else
+			else
-$user_extra[$column] = '';
+				$user_extra[$column] = '';
-}
+		}
-if ( isset($row['date_format']) )
+		if ( isset($row['date_format']) )
-$this->date_format = $row['date_format'];
+			$this->date_format = $row['date_format'];
-if ( isset($row['time_format']) )
+		if ( isset($row['time_format']) )
-$this->time_format = $row['time_format'];
+			$this->time_format = $row['time_format'];
-$this->user_extra = $user_extra;
+		$this->user_extra = $user_extra;
-// Leave the rest to PHP's automatic garbage collector ;-)
+		// Leave the rest to PHP's automatic garbage collector ;-)
-$row['password'] = '';
+		$row['password'] = '';
-$row['user_timezone'] = intval($row['user_timezone']) - 1440;
+		$row['user_timezone'] = intval($row['user_timezone']) - 1440;
-profiler_log("SessionManager: finished session check");
+		profiler_log("SessionManager: finished session check");
-return $row;
+		return $row;
-}
+	}
-/**
+	/**
-* Validates a session key, and returns the userdata associated with the key or false. Optimized for compatibility with the old MD5-based auth system.
+	* Validates a session key, and returns the userdata associated with the key or false. Optimized for compatibility with the old MD5-based auth system.
-* @param string $key The session key to validate
+	* @param string $key The session key to validate
-* @return array Keys are 'user_id', 'username', 'email', 'real_name', 'user_level', 'theme', 'style', 'signature', 'reg_time', 'account_active', 'activation_key', and 'auth_level' or bool false if validation failed. The key 'auth_level' is the maximum authorization level that this key provides.
+	* @return array Keys are 'user_id', 'username', 'email', 'real_name', 'user_level', 'theme', 'style', 'signature', 'reg_time', 'account_active', 'activation_key', and 'auth_level' or bool false if validation failed. The key 'auth_level' is the maximum authorization level that this key provides.
-*/
+	*/
-function compat_validate_session($key)
+	function compat_validate_session($key)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$key = $db->escape($key);
+		$key = $db->escape($key);
-$query = $this->sql('SELECT u.user_id,u.username,u.password,u.email,u.real_name,u.user_level,k.source_ip,k.salt,k.time,k.auth_level,1440 AS user_timezone FROM '.table_prefix.'session_keys AS k
+		$query = $this->sql('SELECT u.user_id,u.username,u.password,u.email,u.real_name,u.user_level,k.source_ip,k.salt,k.time,k.auth_level,1440 AS user_timezone FROM '.table_prefix.'session_keys AS k
-LEFT JOIN '.table_prefix.'users AS u
+													LEFT JOIN '.table_prefix.'users AS u
-ON u.user_id=k.user_id
+														ON u.user_id=k.user_id
-WHERE k.session_key=\''.$key.'\';');
+													WHERE k.session_key=\''.$key.'\';');
-if($db->numrows() < 1)
+		if($db->numrows() < 1)
-{
+		{
-// echo '(debug) $session->validate_session: Key '.$key.' was not found in database<br />';
+			// echo '(debug) $session->validate_session: Key '.$key.' was not found in database<br />';
-return false;
+			return false;
-}
+		}
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-$ip = ip2hex($_SERVER['REMOTE_ADDR']);
+		$ip = ip2hex($_SERVER['REMOTE_ADDR']);
-if($row['auth_level'] > $row['user_level'])
+		if($row['auth_level'] > $row['user_level'])
-{
+		{
-// Failed authorization check
+			// Failed authorization check
-// echo '(debug) $session->validate_session: user not authorized for this access level';
+			// echo '(debug) $session->validate_session: user not authorized for this access level';
-return false;
+			return false;
-}
+		}
-if($ip != $row['source_ip'])
+		if($ip != $row['source_ip'])
-{
+		{
-// Failed IP address check
+			// Failed IP address check
-// echo '(debug) $session->validate_session: IP address mismatch; IP in table: '.$row['source_ip'].'; reported IP: '.$ip.'';
+			// echo '(debug) $session->validate_session: IP address mismatch; IP in table: '.$row['source_ip'].'; reported IP: '.$ip.'';
-return false;
+			return false;
-}
+		}
-// Do the password validation
+		// Do the password validation
-$real_key = md5($row['password'] . $row['salt']);
+		$real_key = md5($row['password'] . $row['salt']);
-//die('<pre>'.print_r($keydata, true).'</pre>');
+		//die('<pre>'.print_r($keydata, true).'</pre>');
-if($real_key != $key)
+		if($real_key != $key)
-{
+		{
-// Failed password check
+			// Failed password check
-// echo '(debug) $session->validate_session: supplied password is wrong<br />Real key: '.$real_key.'<br />User key: '.$key;
+			// echo '(debug) $session->validate_session: supplied password is wrong<br />Real key: '.$real_key.'<br />User key: '.$key;
-return false;
+			return false;
-}
+		}
-$time_now = time();
+		$time_now = time();
-$time_key = $row['time'] + 900;
+		$time_key = $row['time'] + 900;
-if($time_now > $time_key && $row['auth_level'] >= 1)
+		if($time_now > $time_key && $row['auth_level'] >= 1)
-{
+		{
-$this->sw_timed_out = true;
+			$this->sw_timed_out = true;
-// Session timed out
+			// Session timed out
-// echo '(debug) $session->validate_session: super session timed out<br />';
+			// echo '(debug) $session->validate_session: super session timed out<br />';
-return false;
+			return false;
-}
+		}
-$row['user_timezone'] = intval($row['user_timezone']) - 1440;
+		$row['user_timezone'] = intval($row['user_timezone']) - 1440;
-return $row;
+		return $row;
-}
+	}
-/**
+	/**
-* Demotes us to one less than the specified auth level. AKA destroys elevated authentication and/or logs out the user, depending on $level
+	* Demotes us to one less than the specified auth level. AKA destroys elevated authentication and/or logs out the user, depending on $level
-* @param int $level How low we should go - USER_LEVEL_MEMBER means demote to USER_LEVEL_GUEST, and anything more powerful than USER_LEVEL_MEMBER means demote to USER_LEVEL_MEMBER
+	* @param int $level How low we should go - USER_LEVEL_MEMBER means demote to USER_LEVEL_GUEST, and anything more powerful than USER_LEVEL_MEMBER means demote to USER_LEVEL_MEMBER
-* @return string 'success' if successful, or error on failure
+	* @return string 'success' if successful, or error on failure
-*/
+	*/
-function logout($level = USER_LEVEL_MEMBER)
+	function logout($level = USER_LEVEL_MEMBER)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$ou = $this->username;
+		$ou = $this->username;
-$oid = $this->user_id;
+		$oid = $this->user_id;
-if($level > USER_LEVEL_MEMBER)
+		if($level > USER_LEVEL_MEMBER)
-{
+		{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+			$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-if(!$this->user_logged_in || $this->auth_level < ( USER_LEVEL_MEMBER + 1))
+			if(!$this->user_logged_in || $this->auth_level < ( USER_LEVEL_MEMBER + 1))
-{
+			{
-return 'success';
+				return 'success';
-}
+			}
-// Destroy elevated privileges
+			// Destroy elevated privileges
-$keyhash = md5($this->sid_super);
+			$keyhash = md5($this->sid_super);
-$this->sql('DELETE FROM '.table_prefix.'session_keys WHERE session_key=\''.$keyhash.'\' AND user_id=\'' . $this->user_id . '\';');
+			$this->sql('DELETE FROM '.table_prefix.'session_keys WHERE session_key=\''.$keyhash.'\' AND user_id=\'' . $this->user_id . '\';');
-$this->sid_super = false;
+			$this->sid_super = false;
-$this->auth_level = USER_LEVEL_MEMBER;
+			$this->auth_level = USER_LEVEL_MEMBER;
-}
+		}
-else
+		else
-{
+		{
-if($this->user_logged_in)
+			if($this->user_logged_in)
-{
+			{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+				$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-// Completely destroy our session
+				// Completely destroy our session
-if($this->auth_level > USER_LEVEL_MEMBER)
+				if($this->auth_level > USER_LEVEL_MEMBER)
-{
+				{
-$this->logout(USER_LEVEL_ADMIN);
+					$this->logout(USER_LEVEL_ADMIN);
-}
+				}
-$this->sql('DELETE FROM '.table_prefix.'session_keys WHERE session_key=\''.md5($this->sid).'\';');
+				$this->sql('DELETE FROM '.table_prefix.'session_keys WHERE session_key=\''.md5($this->sid).'\';');
-setcookie( 'sid', '', time()-(3600*24), scriptPath.'/' );
+				setcookie( 'sid', '', time()-(3600*24), scriptPath.'/' );
-}
+			}
-}
+		}
-$code = $plugins->setHook('logout_success'); // , Array('level'=>$level,'old_username'=>$ou,'old_user_id'=>$oid));
+		$code = $plugins->setHook('logout_success'); // , Array('level'=>$level,'old_username'=>$ou,'old_user_id'=>$oid));
-foreach ( $code as $cmd )
+		foreach ( $code as $cmd )
-{
+		{
-eval($cmd);
+			eval($cmd);
-}
+		}
-return 'success';
+		return 'success';
-}
+	}
-# Miscellaneous stuff
+	# Miscellaneous stuff
-/**
+	/**
-* Alerts the user that their account is inactive, and tells them appropriate steps to remedy the situation. Halts execution.
+	* Alerts the user that their account is inactive, and tells them appropriate steps to remedy the situation. Halts execution.
-* @param array Return from validate_session()
+	* @param array Return from validate_session()
-*/
+	*/
-function show_inactive_error($userdata)
+	function show_inactive_error($userdata)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-global $title;
+		global $title;
-$paths->init($title);
+		$paths->init($title);
-$language = intval(getConfig('default_language'));
+		$language = intval(getConfig('default_language'));
-$lang = new Language($language);
+		$lang = new Language($language);
-@setlocale(LC_ALL, $lang->lang_code);
+		@setlocale(LC_ALL, $lang->lang_code);
-$a = getConfig('account_activation');
+		$a = getConfig('account_activation');
-switch($a)
+		switch($a)
-{
+		{
-case 'none':
+			case 'none':
-default:
+			default:
-$solution = $lang->get('user_login_noact_solution_none');
+				$solution = $lang->get('user_login_noact_solution_none');
-break;
+				break;
-case 'user':
+			case 'user':
-$solution = $lang->get('user_login_noact_solution_user');
+				$solution = $lang->get('user_login_noact_solution_user');
-break;
+				break;
-case 'admin':
+			case 'admin':
-$solution = $lang->get('user_login_noact_solution_admin');
+				$solution = $lang->get('user_login_noact_solution_admin');
-break;
+				break;
-}
+		}
-// admin activation request opportunity
+		// admin activation request opportunity
-$q = $db->sql_query('SELECT 1 FROM '.table_prefix.'logs WHERE log_type=\'admin\' AND action=\'activ_req\' AND edit_summary=\'' . $db->escape($userdata['username']) . '\';');
+		$q = $db->sql_query('SELECT 1 FROM '.table_prefix.'logs WHERE log_type=\'admin\' AND action=\'activ_req\' AND edit_summary=\'' . $db->escape($userdata['username']) . '\';');
-if ( !$q )
+		if ( !$q )
-$db->_die();
+			$db->_die();
-$can_request = ( $db->numrows() < 1 );
+		$can_request = ( $db->numrows() < 1 );
-$db->free_result();
+		$db->free_result();
-if ( isset($_POST['logout']) )
+		if ( isset($_POST['logout']) )
-{
+		{
-$this->sid = $_COOKIE['sid'];
+			$this->sid = $_COOKIE['sid'];
-$this->user_logged_in = true;
+			$this->user_logged_in = true;
-$this->user_id =       intval($userdata['user_id']);
+			$this->user_id =       intval($userdata['user_id']);
-$this->username =      $userdata['username'];
+			$this->username =      $userdata['username'];
-$this->auth_level =    USER_LEVEL_MEMBER;
+			$this->auth_level =    USER_LEVEL_MEMBER;
-$this->user_level =    USER_LEVEL_MEMBER;
+			$this->user_level =    USER_LEVEL_MEMBER;
-$this->logout();
+			$this->logout();
-redirect(scriptPath . '/', $lang->get('user_login_noact_msg_logout_success_title'), $lang->get('user_login_noact_msg_logout_success_body'), 5);
+			redirect(scriptPath . '/', $lang->get('user_login_noact_msg_logout_success_title'), $lang->get('user_login_noact_msg_logout_success_body'), 5);
-}
+		}
-if ( $can_request && !isset($_POST['activation_request']) )
+		if ( $can_request && !isset($_POST['activation_request']) )
-{
+		{
-$form = '<p>' . $lang->get('user_login_noact_msg_ask_admins') . '</p>
+			$form = '<p>' . $lang->get('user_login_noact_msg_ask_admins') . '</p>
-<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
+							<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
-<p><input type="submit" name="activation_request" value="' . $lang->get('user_login_noact_btn_request_activation') . '" /> <input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
+								<p><input type="submit" name="activation_request" value="' . $lang->get('user_login_noact_btn_request_activation') . '" /> <input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
-</form>';
+							</form>';
-}
+		}
-else
+		else
-{
+		{
-if ( $can_request && isset($_POST['activation_request']) )
+			if ( $can_request && isset($_POST['activation_request']) )
-{
+			{
-$this->admin_activation_request($userdata['username']);
+				$this->admin_activation_request($userdata['username']);
-$form = '<p>' . $lang->get('user_login_noact_msg_admins_just_asked') . '</p>
+				$form = '<p>' . $lang->get('user_login_noact_msg_admins_just_asked') . '</p>
-<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
+								<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
-<p><input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
+									<p><input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
-</form>';
+								</form>';
-}
+			}
-else
+			else
-{
+			{
-$form = '<p>' . $lang->get('user_login_noact_msg_admins_asked') . '</p>
+				$form = '<p>' . $lang->get('user_login_noact_msg_admins_asked') . '</p>
-<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
+								<form action="' . makeUrlNS('System', 'ActivateStub') . '" method="post">
-<p><input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
+									<p><input type="submit" name="logout" value="' . $lang->get('user_login_noact_btn_log_out') . '" /></p>
-</form>';
+								</form>';
-}
+			}
-}
+		}
-global $output;
+		global $output;
-$output = new Output_HTML();
+		$output = new Output_HTML();
-$output->set_title($lang->get('user_login_noact_title'));
+		$output->set_title($lang->get('user_login_noact_title'));
-die_friendly($lang->get('user_login_noact_title'), '<p>' . $lang->get('user_login_noact_msg_intro') . ' '.$solution.'</p>' . $form);
+		die_friendly($lang->get('user_login_noact_title'), '<p>' . $lang->get('user_login_noact_msg_intro') . ' '.$solution.'</p>' . $form);
-}
+	}
-/**
+	/**
-* Appends the high-privilege session key to the URL if we are authorized to do high-privilege stuff
+	* Appends the high-privilege session key to the URL if we are authorized to do high-privilege stuff
-* @param string $url The URL to add session data to
+	* @param string $url The URL to add session data to
-* @return string
+	* @return string
-*/
+	*/
-function append_sid($url)
+	function append_sid($url)
-{
+	{
-$sep = ( strstr($url, '?') ) ? '&' : '?';
+		$sep = ( strstr($url, '?') ) ? '&' : '?';
-if ( $this->sid_super )
+		if ( $this->sid_super )
-{
+		{
-$url = $url . $sep . 'auth=' . urlencode($this->sid_super);
+			$url = $url . $sep . 'auth=' . urlencode($this->sid_super);
-// echo($this->sid_super.'<br/>');
+			// echo($this->sid_super.'<br/>');
-}
+		}
-return $url;
+		return $url;
-}
+	}
-/**
+	/**
-* Prevent the user from changing their password. Authentication plugins may call this to enforce single sign-on.
+	* Prevent the user from changing their password. Authentication plugins may call this to enforce single sign-on.
-* @param string URL to page where the user may change their password
+	* @param string URL to page where the user may change their password
-* @param string Title of the page where the user may change their password
+	* @param string Title of the page where the user may change their password
-* @return null
+	* @return null
-*/
+	*/
-function disable_password_change($change_url = false, $change_title = false)
+	function disable_password_change($change_url = false, $change_title = false)
-{
+	{
-if ( $this->password_change_disabled )
+		if ( $this->password_change_disabled )
-{
+		{
-// don't allow calling twice. if we have two plugins doing this, somebody is bad at configuring websites.
+			// don't allow calling twice. if we have two plugins doing this, somebody is bad at configuring websites.
-return false;
+			return false;
-}
+		}
-if ( is_string($change_url) && is_string($change_title) )
+		if ( is_string($change_url) && is_string($change_title) )
-{
+		{
-$this->password_change_dest = array(
+			$this->password_change_dest = array(
-'url' => $change_url,
+					'url' => $change_url,
-'title' => $change_title
+					'title' => $change_title
-);
+				);
-}
+		}
-else
+		else
-{
+		{
-$this->password_change_dest = array(
+			$this->password_change_dest = array(
-'url' => false,
+					'url' => false,
-'title' => false
+					'title' => false
-);
+				);
-}
+		}
-$this->password_change_disabled = true;
+		$this->password_change_disabled = true;
-}
+	}
-/**
+	/**
-* Grabs the user's password MD5 - NOW DEPRECATED AND DISABLED.
+	* Grabs the user's password MD5 - NOW DEPRECATED AND DISABLED.
-* @return bool false
+	* @return bool false
-*/
+	*/
-function grab_password_hash()
+	function grab_password_hash()
-{
+	{
-return false;
+		return false;
-}
+	}
-/**
+	/**
-* Destroys the user's password MD5 in memory
+	* Destroys the user's password MD5 in memory
-*/
+	*/
-function disallow_password_grab()
+	function disallow_password_grab()
-{
+	{
-$this->password_hash = false;
+		$this->password_hash = false;
-return false;
+		return false;
-}
+	}
-/**
+	/**
-* Generates an AES key and stashes it in the database
+	* Generates an AES key and stashes it in the database
-* @return string Hex-encoded AES key
+	* @return string Hex-encoded AES key
-*/
+	*/
-function rijndael_genkey()
+	function rijndael_genkey()
-{
+	{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-$key = $aes->gen_readymade_key();
+		$key = $aes->gen_readymade_key();
-$keys = getConfig('login_key_cache');
+		$keys = getConfig('login_key_cache');
-if(is_string($keys))
+		if(is_string($keys))
-$keys .= $key;
+			$keys .= $key;
-else
+		else
-$keys = $key;
+			$keys = $key;
-setConfig('login_key_cache', $keys);
+		setConfig('login_key_cache', $keys);
-return $key;
+		return $key;
-}
+	}
-/**
+	/**
-* Generate a totally random 128-bit value for MD5 challenges
+	* Generate a totally random 128-bit value for MD5 challenges
-* @return string
+	* @return string
-*/
+	*/
-function dss_rand()
+	function dss_rand()
-{
+	{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-$random = $aes->randkey(128);
+		$random = $aes->randkey(128);
-unset($aes);
+		unset($aes);
-return md5(microtime() . $random);
+		return md5(microtime() . $random);
-}
+	}
-/**
+	/**
-* Fetch a cached login public key using the MD5sum as an identifier. Each key can only be fetched once before it is destroyed.
+	* Fetch a cached login public key using the MD5sum as an identifier. Each key can only be fetched once before it is destroyed.
-* @param string $md5 The MD5 sum of the key
+	* @param string $md5 The MD5 sum of the key
-* @return string, or bool false on failure
+	* @return string, or bool false on failure
-*/
+	*/
-function fetch_public_key($md5)
+	function fetch_public_key($md5)
-{
+	{
-$keys = getConfig('login_key_cache');
+		$keys = getConfig('login_key_cache');
-$keys = enano_str_split($keys, AES_BITS / 4);
+		$keys = enano_str_split($keys, AES_BITS / 4);
-foreach($keys as $i => $k)
+		foreach($keys as $i => $k)
-{
+		{
-if(md5($k) == $md5)
+			if(md5($k) == $md5)
-{
+			{
-unset($keys[$i]);
+				unset($keys[$i]);
-if(count($keys) > 0)
+				if(count($keys) > 0)
-{
+				{
-if ( strlen(getConfig('login_key_cache') ) > 64000 )
+					if ( strlen(getConfig('login_key_cache') ) > 64000 )
-{
+					{
-// This should only need to be done once every month or so for an average-size site
+						// This should only need to be done once every month or so for an average-size site
-setConfig('login_key_cache', '');
+						setConfig('login_key_cache', '');
-}
+					}
-else
+					else
-{
+					{
-$keys = implode('', array_values($keys));
+						$keys = implode('', array_values($keys));
-setConfig('login_key_cache', $keys);
+						setConfig('login_key_cache', $keys);
-}
+					}
-}
+				}
-else
+				else
-{
+				{
-setConfig('login_key_cache', '');
+					setConfig('login_key_cache', '');
-}
+				}
-return $k;
+				return $k;
-}
+			}
-}
+		}
-// Couldn't find the key...
+		// Couldn't find the key...
-return false;
+		return false;
-}
+	}
-/**
+	/**
-* Adds a user to a group.
+	* Adds a user to a group.
-* @param int User ID
+	* @param int User ID
-* @param int Group ID
+	* @param int Group ID
-* @param bool Group moderator - defaults to false
+	* @param bool Group moderator - defaults to false
-* @return bool True on success, false on failure
+	* @return bool True on success, false on failure
-*/
+	*/
-function add_user_to_group($user_id, $group_id, $is_mod = false)
+	function add_user_to_group($user_id, $group_id, $is_mod = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Validation
+		// Validation
-if ( !is_int($user_id) || !is_int($group_id) || !is_bool($is_mod) )
+		if ( !is_int($user_id) || !is_int($group_id) || !is_bool($is_mod) )
-return false;
+			return false;
-if ( $user_id < 1 || $group_id < 1 )
+		if ( $user_id < 1 || $group_id < 1 )
-return false;
+			return false;
-$mod_switch = ( $is_mod ) ? '1' : '0';
+		$mod_switch = ( $is_mod ) ? '1' : '0';
-$q = $this->sql('SELECT member_id,is_mod FROM '.table_prefix.'group_members WHERE user_id=' . $user_id . ' AND group_id=' . $group_id . ';');
+		$q = $this->sql('SELECT member_id,is_mod FROM '.table_prefix.'group_members WHERE user_id=' . $user_id . ' AND group_id=' . $group_id . ';');
-if ( !$q )
+		if ( !$q )
-$db->_die();
+			$db->_die();
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-{
+		{
-// User is not in group
+			// User is not in group
-$this->sql('INSERT INTO '.table_prefix.'group_members(user_id,group_id,is_mod) VALUES(' . $user_id . ', ' . $group_id . ', ' . $mod_switch . ');');
+			$this->sql('INSERT INTO '.table_prefix.'group_members(user_id,group_id,is_mod) VALUES(' . $user_id . ', ' . $group_id . ', ' . $mod_switch . ');');
-return true;
+			return true;
-}
+		}
-else
+		else
-{
+		{
-$row = $db->fetchrow();
+			$row = $db->fetchrow();
-// Update modship status
+			// Update modship status
-if ( strval($row['is_mod']) == $mod_switch )
+			if ( strval($row['is_mod']) == $mod_switch )
-{
+			{
-// Modship unchanged
+				// Modship unchanged
-return true;
+				return true;
-}
+			}
-else
+			else
-{
+			{
-// Modship changed
+				// Modship changed
-$this->sql('UPDATE '.table_prefix.'group_members SET is_mod=' . $mod_switch . ' WHERE member_id=' . $row['member_id'] . ';');
+				$this->sql('UPDATE '.table_prefix.'group_members SET is_mod=' . $mod_switch . ' WHERE member_id=' . $row['member_id'] . ';');
-return true;
+				return true;
-}
+			}
-}
+		}
-return false;
+		return false;
-}
+	}
-/**
+	/**
-* Removes a user from a group.
+	* Removes a user from a group.
-* @param int User ID
+	* @param int User ID
-* @param int Group ID
+	* @param int Group ID
-* @return bool True on success, false on failure
+	* @return bool True on success, false on failure
-* @todo put a little more error checking in...
+	* @todo put a little more error checking in...
-*/
+	*/
-function remove_user_from_group($user_id, $group_id)
+	function remove_user_from_group($user_id, $group_id)
-{
+	{
-if ( !is_int($user_id) || !is_int($group_id) )
+		if ( !is_int($user_id) || !is_int($group_id) )
-return false;
+			return false;
-$this->sql('DELETE FROM '.table_prefix."group_members WHERE user_id=$user_id AND group_id=$group_id;");
+		$this->sql('DELETE FROM '.table_prefix."group_members WHERE user_id=$user_id AND group_id=$group_id;");
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Checks the banlist to ensure that we're an allowed user. Doesn't return anything because it dies if the user is banned.
+	* Checks the banlist to ensure that we're an allowed user. Doesn't return anything because it dies if the user is banned.
-*/
+	*/
-function check_banlist()
+	function check_banlist()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-$col_reason = ( $this->compat ) ? '\'No reason available (session manager is in compatibility mode)\' AS reason' : 'reason';
+		$col_reason = ( $this->compat ) ? '\'No reason available (session manager is in compatibility mode)\' AS reason' : 'reason';
-$remote_addr = ( strstr($_SERVER['REMOTE_ADDR'], ':') ) ? expand_ipv6_address($_SERVER['REMOTE_ADDR']) : $_SERVER['REMOTE_ADDR'];
+		$remote_addr = ( strstr($_SERVER['REMOTE_ADDR'], ':') ) ? expand_ipv6_address($_SERVER['REMOTE_ADDR']) : $_SERVER['REMOTE_ADDR'];
-$banned = false;
+		$banned = false;
-if ( $this->user_logged_in )
+		if ( $this->user_logged_in )
-{
+		{
-// check by IP, email, and username
+			// check by IP, email, and username
-if ( ENANO_DBLAYER == 'MYSQL' )
+			if ( ENANO_DBLAYER == 'MYSQL' )
-{
+			{
-$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE \n"
+				$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE \n"
-. "    ( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR \n"
+							. "    ( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR \n"
-. "    ( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' REGEXP ban_value ) OR \n"
+							. "    ( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' REGEXP ban_value ) OR \n"
-. "    ( ban_type = " . BAN_USER  . " AND is_regex = 0 AND ban_value = '{$this->username}' ) OR \n"
+							. "    ( ban_type = " . BAN_USER  . " AND is_regex = 0 AND ban_value = '{$this->username}' ) OR \n"
-. "    ( ban_type = " . BAN_USER  . " AND is_regex = 1 AND '{$this->username}' REGEXP ban_value ) OR \n"
+							. "    ( ban_type = " . BAN_USER  . " AND is_regex = 1 AND '{$this->username}' REGEXP ban_value ) OR \n"
-. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 0 AND ban_value = '{$this->email}' ) OR \n"
+							. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 0 AND ban_value = '{$this->email}' ) OR \n"
-. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 1 AND '{$this->email}' REGEXP ban_value ) \n"
+							. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 1 AND '{$this->email}' REGEXP ban_value ) \n"
-. "  ORDER BY ban_type ASC;";
+							. "  ORDER BY ban_type ASC;";
-}
+			}
-else if ( ENANO_DBLAYER == 'PGSQL' )
+			else if ( ENANO_DBLAYER == 'PGSQL' )
-{
+			{
-$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE \n"
+				$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE \n"
-. "    ( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR \n"
+							. "    ( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR \n"
-. "    ( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' ~ ban_value ) OR \n"
+							. "    ( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' ~ ban_value ) OR \n"
-. "    ( ban_type = " . BAN_USER  . " AND is_regex = 0 AND ban_value = '{$this->username}' ) OR \n"
+							. "    ( ban_type = " . BAN_USER  . " AND is_regex = 0 AND ban_value = '{$this->username}' ) OR \n"
-. "    ( ban_type = " . BAN_USER  . " AND is_regex = 1 AND '{$this->username}' ~ ban_value ) OR \n"
+							. "    ( ban_type = " . BAN_USER  . " AND is_regex = 1 AND '{$this->username}' ~ ban_value ) OR \n"
-. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 0 AND ban_value = '{$this->email}' ) OR \n"
+							. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 0 AND ban_value = '{$this->email}' ) OR \n"
-. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 1 AND '{$this->email}' ~ ban_value ) \n"
+							. "    ( ban_type = " . BAN_EMAIL . " AND is_regex = 1 AND '{$this->email}' ~ ban_value ) \n"
-. "  ORDER BY ban_type ASC;";
+							. "  ORDER BY ban_type ASC;";
-}
+			}
-$q = $this->sql($sql);
+			$q = $this->sql($sql);
-if ( $db->numrows() > 0 )
+			if ( $db->numrows() > 0 )
-{
+			{
-while ( list($reason_temp, $ban_value, $ban_type, $is_regex) = $db->fetchrow_num() )
+				while ( list($reason_temp, $ban_value, $ban_type, $is_regex) = $db->fetchrow_num() )
-{
+				{
-if ( $ban_type == BAN_IP && $is_regex != 1 )
+					if ( $ban_type == BAN_IP && $is_regex != 1 )
-{
+					{
-// check range
+						// check range
-$regexp = parse_ip_range_regex($ban_value);
+						$regexp = parse_ip_range_regex($ban_value);
-if ( !$regexp )
+						if ( !$regexp )
-{
+						{
-continue;
+							continue;
-}
+						}
-if ( preg_match("/$regexp/", $remote_addr) )
+						if ( preg_match("/$regexp/", $remote_addr) )
-{
+						{
-$reason = $reason_temp;
+							$reason = $reason_temp;
-$banned = true;
+							$banned = true;
-}
+						}
-}
+					}
-else
+					else
-{
+					{
-// User is banned
+						// User is banned
-$banned = true;
+						$banned = true;
-$reason = $reason_temp;
+						$reason = $reason_temp;
-}
+					}
-}
+				}
-}
+			}
-$db->free_result();
+			$db->free_result();
-}
+		}
-else
+		else
-{
+		{
-// check by IP only
+			// check by IP only
-if ( ENANO_DBLAYER == 'MYSQL' )
+			if ( ENANO_DBLAYER == 'MYSQL' )
-{
+			{
-$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE
+				$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE
-( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR
+									( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR
-( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' REGEXP ban_value )
+									( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' REGEXP ban_value )
-ORDER BY ban_type ASC;";
+								ORDER BY ban_type ASC;";
-}
+			}
-else if ( ENANO_DBLAYER == 'PGSQL' )
+			else if ( ENANO_DBLAYER == 'PGSQL' )
-{
+			{
-$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE
+				$sql = "SELECT $col_reason, ban_value, ban_type, is_regex FROM " . table_prefix . "banlist WHERE
-( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR
+									( ban_type = " . BAN_IP    . " AND is_regex = 0 ) OR
-( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' ~ ban_value )
+									( ban_type = " . BAN_IP    . " AND is_regex = 1 AND '{$_SERVER['REMOTE_ADDR']}' ~ ban_value )
-ORDER BY ban_type ASC;";
+								ORDER BY ban_type ASC;";
-}
+			}
-$q = $this->sql($sql);
+			$q = $this->sql($sql);
-if ( $db->numrows() > 0 )
+			if ( $db->numrows() > 0 )
-{
+			{
-while ( list($reason_temp, $ban_value, $ban_type, $is_regex) = $db->fetchrow_num() )
+				while ( list($reason_temp, $ban_value, $ban_type, $is_regex) = $db->fetchrow_num() )
-{
+				{
-if ( $ban_type == BAN_IP && $is_regex != 1 )
+					if ( $ban_type == BAN_IP && $is_regex != 1 )
-{
+					{
-// check range
+						// check range
-$regexp = parse_ip_range_regex($ban_value);
+						$regexp = parse_ip_range_regex($ban_value);
-if ( !$regexp )
+						if ( !$regexp )
-{
+						{
-die("bad regexp for $ban_value");
+							die("bad regexp for $ban_value");
-continue;
+							continue;
-}
+						}
-if ( preg_match("/$regexp/", $remote_addr) )
+						if ( preg_match("/$regexp/", $remote_addr) )
-{
+						{
-$reason = $reason_temp;
+							$reason = $reason_temp;
-$banned = true;
+							$banned = true;
-}
+						}
-}
+					}
-else
+					else
-{
+					{
-// User is banned
+						// User is banned
-$reason = $reason_temp;
+						$reason = $reason_temp;
-$banned = true;
+						$banned = true;
-}
+					}
-}
+				}
-}
+			}
-$db->free_result();
+			$db->free_result();
-}
+		}
-if ( $banned && !$this->on_critical_page(true) )
+		if ( $banned && !$this->on_critical_page(true) )
-{
+		{
-// This guy is banned - kill the session, kill the database connection, bail out, and be pretty about it
+			// This guy is banned - kill the session, kill the database connection, bail out, and be pretty about it
-die_semicritical($lang->get('user_ban_msg_title'), '<p>' . $lang->get('user_ban_msg_body') . '</p><div class="error-box"><b>' . $lang->get('user_ban_lbl_reason') . '</b><br />' . $reason . '</div>');
+			die_semicritical($lang->get('user_ban_msg_title'), '<p>' . $lang->get('user_ban_msg_body') . '</p><div class="error-box"><b>' . $lang->get('user_ban_lbl_reason') . '</b><br />' . $reason . '</div>');
-exit;
+			exit;
-}
+		}
-}
+	}
-# Registration
+	# Registration
-/**
+	/**
-* Registers a user. This does not perform any type of login.
+	* Registers a user. This does not perform any type of login.
-* @param string New user's username
+	* @param string New user's username
-* @param string This should be unencrypted.
+	* @param string This should be unencrypted.
-* @param string E-mail address.
+	* @param string E-mail address.
-* @param string Optional, defaults to ''.
+	* @param string Optional, defaults to ''.
-* @param bool Optional. If true, the account is not activated initially and an admin activation request is sent. The caller is responsible for sending the address info and notice.
+	* @param bool Optional. If true, the account is not activated initially and an admin activation request is sent. The caller is responsible for sending the address info and notice.
-*/
+	*/
-function create_user($username, $password, $email, $real_name = '', $coppa = false)
+	function create_user($username, $password, $email, $real_name = '', $coppa = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-// Initialize AES
+		// Initialize AES
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-// Since we're recording IP addresses, make sure the user's IP is safe.
+		// Since we're recording IP addresses, make sure the user's IP is safe.
-$ip =& $_SERVER['REMOTE_ADDR'];
+		$ip =& $_SERVER['REMOTE_ADDR'];
-if ( !is_valid_ip($ip) )
+		if ( !is_valid_ip($ip) )
-return 'Invalid IP';
+			return 'Invalid IP';
-if ( !preg_match('#^'.$this->valid_username.'$#', $username) )
+		if ( !preg_match('#^'.$this->valid_username.'$#', $username) )
-return $lang->get('user_reg_err_username_banned_chars');
+			return $lang->get('user_reg_err_username_banned_chars');
-$username = str_replace('_', ' ', $username);
+		$username = str_replace('_', ' ', $username);
-$user_orig = $username;
+		$user_orig = $username;
-$username = $this->prepare_text($username);
+		$username = $this->prepare_text($username);
-$email = $this->prepare_text($email);
+		$email = $this->prepare_text($email);
-$real_name = $this->prepare_text($real_name);
+		$real_name = $this->prepare_text($real_name);
-$nameclause = ( $real_name != '' ) ? ' OR real_name=\''.$real_name.'\'' : '';
+		$nameclause = ( $real_name != '' ) ? ' OR real_name=\''.$real_name.'\'' : '';
-$q = $this->sql('SELECT * FROM '.table_prefix.'users WHERE ' . ENANO_SQLFUNC_LOWERCASE . '(username)=\''.strtolower($username).'\' OR email=\''.$email.'\''.$nameclause.';');
+		$q = $this->sql('SELECT * FROM '.table_prefix.'users WHERE ' . ENANO_SQLFUNC_LOWERCASE . '(username)=\''.strtolower($username).'\' OR email=\''.$email.'\''.$nameclause.';');
-if($db->numrows() > 0)
+		if($db->numrows() > 0)
-{
+		{
-$row = $db->fetchrow();
+			$row = $db->fetchrow();
-$str = 'user_reg_err_dupe';
+			$str = 'user_reg_err_dupe';
-if ( $row['username'] == $username )
+			if ( $row['username'] == $username )
-{
+			{
-$str .= '_username';
+				$str .= '_username';
-}
+			}
-if ( $row['email'] == $email )
+			if ( $row['email'] == $email )
-{
+			{
-$str .= '_email';
+				$str .= '_email';
-}
+			}
-if ( $row['real_name'] == $real_name && $real_name != '' )
+			if ( $row['real_name'] == $real_name && $real_name != '' )
-{
+			{
-$str .= '_realname';
+				$str .= '_realname';
-}
+			}
-return $lang->get($str);
+			return $lang->get($str);
-}
+		}
-// Is the password strong enough?
+		// Is the password strong enough?
-if ( getConfig('pw_strength_enable') )
+		if ( getConfig('pw_strength_enable') )
-{
+		{
-$min_score = intval( getConfig('pw_strength_minimum') );
+			$min_score = intval( getConfig('pw_strength_minimum') );
-$pass_score = password_score($password);
+			$pass_score = password_score($password);
-if ( $pass_score < $min_score )
+			if ( $pass_score < $min_score )
-{
+			{
-return $lang->get('user_reg_err_password_too_weak');
+				return $lang->get('user_reg_err_password_too_weak');
-}
+			}
-}
+		}
-// Require the account to be activated?
+		// Require the account to be activated?
-switch(getConfig('account_activation'))
+		switch(getConfig('account_activation'))
-{
+		{
-case 'none':
+			case 'none':
-default:
+			default:
-$active = '1';
+				$active = '1';
-break;
+				break;
-case 'user':
+			case 'user':
-$active = '0';
+				$active = '0';
-break;
+				break;
-case 'admin':
+			case 'admin':
-$active = '0';
+				$active = '0';
-break;
+				break;
-}
+		}
-if ( $coppa )
+		if ( $coppa )
-$active = '0';
+			$active = '0';
-$coppa_col = ( $coppa ) ? '1' : '0';
+		$coppa_col = ( $coppa ) ? '1' : '0';
-// Generate a totally random activation key
+		// Generate a totally random activation key
-$actkey = sha1 ( microtime() . mt_rand() );
+		$actkey = sha1 ( microtime() . mt_rand() );
-// We good, create the user
+		// We good, create the user
-$this->sql('INSERT INTO ' . table_prefix . "users ( username, email, real_name, theme, style, reg_time, account_active, activation_key, user_level, user_coppa,\n"
+		$this->sql('INSERT INTO ' . table_prefix . "users ( username, email, real_name, theme, style, reg_time, account_active, activation_key, user_level, user_coppa,\n"
-. "                                        user_registration_ip, user_lang, user_has_avatar, avatar_type ) VALUES\n"
+						. "                                        user_registration_ip, user_lang, user_has_avatar, avatar_type ) VALUES\n"
-. "  ( '$username', '$email', '$real_name', '$template->default_theme', '$template->default_style', " . time() . ", $active, '$actkey', \n"
+						. "  ( '$username', '$email', '$real_name', '$template->default_theme', '$template->default_style', " . time() . ", $active, '$actkey', \n"
-. "    " . USER_LEVEL_CHPREF . ", $coppa_col, '$ip', $lang->lang_id, 0, 'png' );");
+						. "    " . USER_LEVEL_CHPREF . ", $coppa_col, '$ip', $lang->lang_id, 0, 'png' );");
-// Get user ID and create users_extra entry
+		// Get user ID and create users_extra entry
-$q = $this->sql('SELECT user_id FROM '.table_prefix."users WHERE username='$username';");
+		$q = $this->sql('SELECT user_id FROM '.table_prefix."users WHERE username='$username';");
-if ( $db->numrows() > 0 )
+		if ( $db->numrows() > 0 )
-{
+		{
-list($user_id) = $db->fetchrow_num();
+			list($user_id) = $db->fetchrow_num();
-$db->free_result();
+			$db->free_result();
-$this->sql('INSERT INTO '.table_prefix.'users_extra(user_id) VALUES(' . $user_id . ');');
+			$this->sql('INSERT INTO '.table_prefix.'users_extra(user_id) VALUES(' . $user_id . ');');
-}
+		}
-// Set the password
+		// Set the password
-$this->set_password($user_id, $password);
+		$this->set_password($user_id, $password);
-// Config option added, 1.1.5
+		// Config option added, 1.1.5
-if ( getConfig('userpage_grant_acl', '1') == '1' )
+		if ( getConfig('userpage_grant_acl', '1') == '1' )
-{
+		{
-// Grant edit and very limited mod access to the userpage
+			// Grant edit and very limited mod access to the userpage
-$acl_data = array(
+			$acl_data = array(
-'read' => AUTH_ALLOW,
+					'read' => AUTH_ALLOW,
-'view_source' => AUTH_ALLOW,
+					'view_source' => AUTH_ALLOW,
-'edit_page' => AUTH_ALLOW,
+					'edit_page' => AUTH_ALLOW,
-'post_comments' => AUTH_ALLOW,
+					'post_comments' => AUTH_ALLOW,
-'edit_comments' => AUTH_ALLOW, // only allows editing own comments
+					'edit_comments' => AUTH_ALLOW, // only allows editing own comments
-'history_view' => AUTH_ALLOW,
+					'history_view' => AUTH_ALLOW,
-'history_rollback' => AUTH_ALLOW,
+					'history_rollback' => AUTH_ALLOW,
-'rename' => AUTH_ALLOW,
+					'rename' => AUTH_ALLOW,
-'delete_page' => AUTH_ALLOW,
+					'delete_page' => AUTH_ALLOW,
-'tag_create' => AUTH_ALLOW,
+					'tag_create' => AUTH_ALLOW,
-'tag_delete_own' => AUTH_ALLOW,
+					'tag_delete_own' => AUTH_ALLOW,
-'tag_delete_other' => AUTH_ALLOW,
+					'tag_delete_other' => AUTH_ALLOW,
-'edit_cat' => AUTH_ALLOW,
+					'edit_cat' => AUTH_ALLOW,
-'create_page' => AUTH_ALLOW
+					'create_page' => AUTH_ALLOW
-);
+				);
-$acl_data = $db->escape($this->perm_to_string($acl_data));
+			$acl_data = $db->escape($this->perm_to_string($acl_data));
-$userpage = $db->escape(sanitize_page_id($user_orig));
+			$userpage = $db->escape(sanitize_page_id($user_orig));
-$cols = "target_type, target_id, page_id, namespace, rules";
+			$cols = "target_type, target_id, page_id, namespace, rules";
-$vals = ACL_TYPE_USER . ", $user_id, '$userpage', 'User', '$acl_data'";
+			$vals = ACL_TYPE_USER . ", $user_id, '$userpage', 'User', '$acl_data'";
-$q = "INSERT INTO ".table_prefix."acl($cols) VALUES($vals);";
+			$q = "INSERT INTO ".table_prefix."acl($cols) VALUES($vals);";
-$this->sql($q);
+			$this->sql($q);
-}
+		}
-// Require the account to be activated?
+		// Require the account to be activated?
-if ( $coppa )
+		if ( $coppa )
-{
+		{
-$this->admin_activation_request($user_orig);
+			$this->admin_activation_request($user_orig);
-$this->send_coppa_mail($user_orig, $email);
+			$this->send_coppa_mail($user_orig, $email);
-}
+		}
-else
+		else
-{
+		{
-switch(getConfig('account_activation'))
+			switch(getConfig('account_activation'))
-{
+			{
-case 'none':
+				case 'none':
-default:
+				default:
-break;
+					break;
-case 'user':
+				case 'user':
-$a = $this->send_activation_mail($user_orig);
+					$a = $this->send_activation_mail($user_orig);
-if(!$a)
+					if(!$a)
-{
+					{
-$this->admin_activation_request($user_orig);
+						$this->admin_activation_request($user_orig);
-return $lang->get('user_reg_err_actmail_failed') . ' ' . $a;
+						return $lang->get('user_reg_err_actmail_failed') . ' ' . $a;
-}
+					}
-break;
+					break;
-case 'admin':
+				case 'admin':
-$this->admin_activation_request($user_orig);
+					$this->admin_activation_request($user_orig);
-break;
+					break;
-}
+			}
-}
+		}
-// Leave some data behind for the hook
+		// Leave some data behind for the hook
-$code = $plugins->setHook('user_registered');
+		$code = $plugins->setHook('user_registered');
-foreach ( $code as $cmd )
+		foreach ( $code as $cmd )
-{
+		{
-eval($cmd);
+			eval($cmd);
-}
+		}
-return 'success';
+		return 'success';
-}
+	}
-/**
+	/**
-* Attempts to send an e-mail to the specified user with activation instructions.
+	* Attempts to send an e-mail to the specified user with activation instructions.
-* @param string $u The usernamd of the user requesting activation
+	* @param string $u The usernamd of the user requesting activation
-* @return bool true on success, false on failure
+	* @return bool true on success, false on failure
-*/
+	*/
-function send_activation_mail($u, $actkey = false)
+	function send_activation_mail($u, $actkey = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-$q = $this->sql('SELECT username,activation_key,account_active,email FROM '.table_prefix.'users WHERE username=\''.$db->escape($u).'\';');
+		$q = $this->sql('SELECT username,activation_key,account_active,email FROM '.table_prefix.'users WHERE username=\''.$db->escape($u).'\';');
-$r = $db->fetchrow();
+		$r = $db->fetchrow();
-if ( empty($r['email']) )
+		if ( empty($r['email']) )
-$db->_die('BUG: $session->send_activation_mail(): no e-mail address in row');
+			$db->_die('BUG: $session->send_activation_mail(): no e-mail address in row');
-$aklink = makeUrlComplete('Special', 'ActivateAccount/'.str_replace(' ', '_', $u).'/'. ( ( is_string($actkey) ) ? $actkey : $r['activation_key'] ) );
+		$aklink = makeUrlComplete('Special', 'ActivateAccount/'.str_replace(' ', '_', $u).'/'. ( ( is_string($actkey) ) ? $actkey : $r['activation_key'] ) );
-$message = $lang->get('user_reg_activation_email', array(
+		$message = $lang->get('user_reg_activation_email', array(
-'activation_link' => $aklink,
+				'activation_link' => $aklink,
-'username' => $u
+				'username' => $u
-));
+			));
-if ( getConfig('smtp_enabled') == '1' )
+		if ( getConfig('smtp_enabled') == '1' )
-{
+		{
-$result = smtp_send_email($r['email'], $lang->get('user_reg_activation_email_subject'), preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
+			$result = smtp_send_email($r['email'], $lang->get('user_reg_activation_email_subject'), preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
-if ( $result == 'success' )
+			if ( $result == 'success' )
-{
+			{
-$result = true;
+				$result = true;
-}
+			}
-else
+			else
-{
+			{
-echo $result;
+				echo $result;
-$result = false;
+				$result = false;
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-$result = mail($r['email'], $lang->get('user_reg_activation_email_subject'), preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
+			$result = mail($r['email'], $lang->get('user_reg_activation_email_subject'), preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
-}
+		}
-return $result;
+		return $result;
-}
+	}
-/**
+	/**
-* Attempts to send an e-mail to the specified user's e-mail address on file intended for the parents
+	* Attempts to send an e-mail to the specified user's e-mail address on file intended for the parents
-* @param string $u The usernamd of the user requesting activation
+	* @param string $u The usernamd of the user requesting activation
-* @return bool true on success, false on failure
+	* @return bool true on success, false on failure
-*/
+	*/
-function send_coppa_mail($u, $actkey = false)
+	function send_coppa_mail($u, $actkey = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-$q = $this->sql('SELECT username,email FROM '.table_prefix.'users WHERE user_id=2 OR user_level=' . USER_LEVEL_ADMIN . ' ORDER BY user_id ASC;');
+		$q = $this->sql('SELECT username,email FROM '.table_prefix.'users WHERE user_id=2 OR user_level=' . USER_LEVEL_ADMIN . ' ORDER BY user_id ASC;');
-$un = $db->fetchrow();
+		$un = $db->fetchrow();
-$admin_user = $un['username'];
+		$admin_user = $un['username'];
-$q = $this->sql('SELECT username,activation_key,account_active,email FROM '.table_prefix.'users WHERE username=\''.$db->escape($u).'\';');
+		$q = $this->sql('SELECT username,activation_key,account_active,email FROM '.table_prefix.'users WHERE username=\''.$db->escape($u).'\';');
-$r = $db->fetchrow();
+		$r = $db->fetchrow();
-if ( empty($r['email']) )
+		if ( empty($r['email']) )
-$db->_die('BUG: $session->send_activation_mail(): no e-mail address in row');
+			$db->_die('BUG: $session->send_activation_mail(): no e-mail address in row');
-if(isset($_SERVER['HTTPS'])) $prot = 'https';
+		if(isset($_SERVER['HTTPS'])) $prot = 'https';
-else $prot = 'http';
+		else $prot = 'http';
-if($_SERVER['SERVER_PORT'] == '80') $p = '';
+		if($_SERVER['SERVER_PORT'] == '80') $p = '';
-else $p = ':'.$_SERVER['SERVER_PORT'];
+		else $p = ':'.$_SERVER['SERVER_PORT'];
-$sidbak = false;
+		$sidbak = false;
-if($this->sid_super)
+		if($this->sid_super)
-$sidbak = $this->sid_super;
+			$sidbak = $this->sid_super;
-$this->sid_super = false;
+		$this->sid_super = false;
-if($sidbak)
+		if($sidbak)
-$this->sid_super = $sidbak;
+			$this->sid_super = $sidbak;
-unset($sidbak);
+		unset($sidbak);
-$link = "$prot://".$_SERVER['HTTP_HOST'].scriptPath;
+		$link = "$prot://".$_SERVER['HTTP_HOST'].scriptPath;
-$message = $lang->get(
+		$message = $lang->get(
-'user_reg_activation_email_coppa',
+				'user_reg_activation_email_coppa',
-array(
+				array(
-'username' => $u,
+					'username' => $u,
-'admin_user' => $admin_user,
+					'admin_user' => $admin_user,
-'site_link' => $link
+					'site_link' => $link
-)
+				)
-);
+			);
-if(getConfig('smtp_enabled') == '1')
+		if(getConfig('smtp_enabled') == '1')
-{
+		{
-$result = smtp_send_email($r['email'], getConfig('site_name').' website account activation', preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
+			$result = smtp_send_email($r['email'], getConfig('site_name').' website account activation', preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
-if($result == 'success')
+			if($result == 'success')
-{
+			{
-$result = true;
+				$result = true;
-}
+			}
-else
+			else
-{
+			{
-echo $result;
+				echo $result;
-$result = false;
+				$result = false;
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-$result = mail($r['email'], getConfig('site_name').' website account activation', preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
+			$result = mail($r['email'], getConfig('site_name').' website account activation', preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
-}
+		}
-return $result;
+		return $result;
-}
+	}
-/**
+	/**
-* Sends an e-mail to a user so they can reset their password.
+	* Sends an e-mail to a user so they can reset their password.
-* @param int $user The user ID, or username if it's a string
+	* @param int $user The user ID, or username if it's a string
-* @return bool true on success, false on failure
+	* @return bool true on success, false on failure
-*/
+	*/
-function mail_password_reset($user)
+	function mail_password_reset($user)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-if(is_int($user))
+		if(is_int($user))
-{
+		{
-$q = $this->sql('SELECT user_id,username,email FROM '.table_prefix.'users WHERE user_id='.$user.';'); // This is SAFE! This is only called if $user is an integer
+			$q = $this->sql('SELECT user_id,username,email FROM '.table_prefix.'users WHERE user_id='.$user.';'); // This is SAFE! This is only called if $user is an integer
-}
+		}
-elseif(is_string($user))
+		elseif(is_string($user))
-{
+		{
-$q = $this->sql('SELECT user_id,username,email FROM '.table_prefix.'users WHERE ' . ENANO_SQLFUNC_LOWERCASE . '(username)=' . ENANO_SQLFUNC_LOWERCASE . '(\''.$db->escape($user).'\');');
+			$q = $this->sql('SELECT user_id,username,email FROM '.table_prefix.'users WHERE ' . ENANO_SQLFUNC_LOWERCASE . '(username)=' . ENANO_SQLFUNC_LOWERCASE . '(\''.$db->escape($user).'\');');
-}
+		}
-else
+		else
-{
+		{
-return false;
+			return false;
-}
+		}
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-$temp_pass = $this->random_pass();
+		$temp_pass = $this->random_pass();
-$this->register_temp_password($row['user_id'], $temp_pass);
+		$this->register_temp_password($row['user_id'], $temp_pass);
-$site_name = getConfig('site_name');
+		$site_name = getConfig('site_name');
-$message = $lang->get('userfuncs_passreset_email', array(
+		$message = $lang->get('userfuncs_passreset_email', array(
-'username' => $row['username'],
+				'username' => $row['username'],
-'site_name' => $site_name,
+				'site_name' => $site_name,
-'remote_addr' => $_SERVER['REMOTE_ADDR'],
+				'remote_addr' => $_SERVER['REMOTE_ADDR'],
-'temp_pass' => $temp_pass
+				'temp_pass' => $temp_pass
-));
+			));
-if(getConfig('smtp_enabled') == '1')
+		if(getConfig('smtp_enabled') == '1')
-{
+		{
-$result = smtp_send_email($row['email'], getConfig('site_name').' password reset', preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
+			$result = smtp_send_email($row['email'], getConfig('site_name').' password reset', preg_replace("#(?<!\r)\n#s", "\n", $message), getConfig('contact_email'));
-if($result == 'success')
+			if($result == 'success')
-{
+			{
-$result = true;
+				$result = true;
-}
+			}
-else
+			else
-{
+			{
-echo '<p>'.$result.'</p>';
+				echo '<p>'.$result.'</p>';
-$result = false;
+				$result = false;
-}
+			}
-} else {
+		} else {
-$result = mail($row['email'], getConfig('site_name').' password reset', preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
+			$result = mail($row['email'], getConfig('site_name').' password reset', preg_replace("#(?<!\r)\n#s", "\n", $message), 'From: '.getConfig('contact_email'));
-}
+		}
-return $result;
+		return $result;
-}
+	}
-/**
+	/**
-* Sets the temporary password for the specified user to whatever is specified.
+	* Sets the temporary password for the specified user to whatever is specified.
-* @param int $user_id
+	* @param int $user_id
-* @param string $password
+	* @param string $password
-* @return bool
+	* @return bool
-*/
+	*/
-function register_temp_password($user_id, $password)
+	function register_temp_password($user_id, $password)
-{
+	{
-global $db;
+		global $db;
-if ( !is_int($user_id) )
+		if ( !is_int($user_id) )
-return false;
+			return false;
-$this->sql('SELECT password_salt FROM ' . table_prefix . "users WHERE user_id = $user_id;");
+		$this->sql('SELECT password_salt FROM ' . table_prefix . "users WHERE user_id = $user_id;");
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-return false;
+			return false;
-list($salt) = $db->fetchrow_num();
+		list($salt) = $db->fetchrow_num();
-$db->free_result();
+		$db->free_result();
-$temp_pass = hmac_sha1($password, $salt);
+		$temp_pass = hmac_sha1($password, $salt);
-$this->sql('UPDATE '.table_prefix.'users SET temp_password=\'' . $temp_pass . '\',temp_password_time='.time().' WHERE user_id='.intval($user_id).';');
+		$this->sql('UPDATE '.table_prefix.'users SET temp_password=\'' . $temp_pass . '\',temp_password_time='.time().' WHERE user_id='.intval($user_id).';');
-}
+	}
-/**
+	/**
-* Sends a request to the admin panel to have the username $u activated.
+	* Sends a request to the admin panel to have the username $u activated.
-* @param string $u The username of the user requesting activation
+	* @param string $u The username of the user requesting activation
-*/
+	*/
-function admin_activation_request($u)
+	function admin_activation_request($u)
-{
+	{
-global $db;
+		global $db;
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type, action, time_id, date_string, author, edit_summary) VALUES(\'admin\', \'activ_req\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$this->username.'\', \''.$db->escape($u).'\');');
+		$this->sql('INSERT INTO '.table_prefix.'logs(log_type, action, time_id, date_string, author, edit_summary) VALUES(\'admin\', \'activ_req\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$this->username.'\', \''.$db->escape($u).'\');');
-}
+	}
-/**
+	/**
-* Activates a user account. If the action fails, a report is sent to the admin.
+	* Activates a user account. If the action fails, a report is sent to the admin.
-* @param string $user The username of the user requesting activation
+	* @param string $user The username of the user requesting activation
-* @param string $key The activation key
+	* @param string $key The activation key
-*/
+	*/
-function activate_account($user, $key)
+	function activate_account($user, $key)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$q = $this->sql('SELECT 1 FROM ' . table_prefix . 'users WHERE username = \''.$db->escape($user).'\' AND activation_key = \''.$db->escape($key).'\'');
+		$q = $this->sql('SELECT 1 FROM ' . table_prefix . 'users WHERE username = \''.$db->escape($user).'\' AND activation_key = \''.$db->escape($key).'\'');
-if ( $db->numrows() > 0 )
+		if ( $db->numrows() > 0 )
-{
+		{
-$new_key = md5(AESCrypt::randkey());
+			$new_key = md5(AESCrypt::randkey());
-$this->sql('UPDATE ' . table_prefix . 'users SET account_active = 1, activation_key = \'' . $new_key . '\' WHERE username=\''.$db->escape($user).'\' AND activation_key=\''.$db->escape($key).'\';');
+			$this->sql('UPDATE ' . table_prefix . 'users SET account_active = 1, activation_key = \'' . $new_key . '\' WHERE username=\''.$db->escape($user).'\' AND activation_key=\''.$db->escape($key).'\';');
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'activ_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($user).'\', \''.$_SERVER['REMOTE_ADDR'].'\')');
+			$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'activ_good\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($user).'\', \''.$_SERVER['REMOTE_ADDR'].'\')');
-return true;
+			return true;
-}
+		}
-else
+		else
-{
+		{
-$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'activ_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($user).'\', \''.$_SERVER['REMOTE_ADDR'].'\')');
+			$this->sql('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,date_string,author,edit_summary) VALUES(\'security\', \'activ_bad\', '.time().', \''.enano_date(ED_DATE | ED_TIME).'\', \''.$db->escape($user).'\', \''.$_SERVER['REMOTE_ADDR'].'\')');
-return false;
+			return false;
-}
+		}
-}
+	}
-/**
+	/**
-* For a given user level identifier (USER_LEVEL_*), returns a string describing that user level.
+	* For a given user level identifier (USER_LEVEL_*), returns a string describing that user level.
-* @param int User level
+	* @param int User level
-* @param bool If true, returns a shorter string. Optional.
+	* @param bool If true, returns a shorter string. Optional.
-* @return string
+	* @return string
-*/
+	*/
-function userlevel_to_string($user_level, $short = false)
+	function userlevel_to_string($user_level, $short = false)
-{
+	{
-global $lang;
+		global $lang;
-static $levels = array(
+		static $levels = array(
-'short' => array(
+				'short' => array(
-USER_LEVEL_GUEST => 'Guest',
+						USER_LEVEL_GUEST => 'Guest',
-USER_LEVEL_MEMBER => 'Member',
+						USER_LEVEL_MEMBER => 'Member',
-USER_LEVEL_CHPREF => 'Sensitive preferences changeable',
+						USER_LEVEL_CHPREF => 'Sensitive preferences changeable',
-USER_LEVEL_MOD => 'Moderator',
+						USER_LEVEL_MOD => 'Moderator',
-USER_LEVEL_ADMIN => 'Administrative'
+						USER_LEVEL_ADMIN => 'Administrative'
-),
+					),
-'long' => array(
+				'long' => array(
-USER_LEVEL_GUEST => 'Low - guest privileges',
+						USER_LEVEL_GUEST => 'Low - guest privileges',
-USER_LEVEL_MEMBER => 'Standard - normal member level',
+						USER_LEVEL_MEMBER => 'Standard - normal member level',
-USER_LEVEL_CHPREF => 'Medium - user can change his/her own e-mail address and password',
+						USER_LEVEL_CHPREF => 'Medium - user can change his/her own e-mail address and password',
-USER_LEVEL_MOD => 'High - moderator privileges',
+						USER_LEVEL_MOD => 'High - moderator privileges',
-USER_LEVEL_ADMIN => 'Highest - administrative privileges'
+						USER_LEVEL_ADMIN => 'Highest - administrative privileges'
-),
+					),
-'l10n' => false
+				'l10n' => false
-);
+			);
-if ( is_object($lang) && !$levels['l10n'] )
+		if ( is_object($lang) && !$levels['l10n'] )
-{
+		{
-$levels = array(
+			$levels = array(
-'short' => array(
+					'short' => array(
-USER_LEVEL_GUEST => $lang->get('user_level_short_guest'),
+							USER_LEVEL_GUEST => $lang->get('user_level_short_guest'),
-USER_LEVEL_MEMBER => $lang->get('user_level_short_member'),
+							USER_LEVEL_MEMBER => $lang->get('user_level_short_member'),
-USER_LEVEL_CHPREF => $lang->get('user_level_short_chpref'),
+							USER_LEVEL_CHPREF => $lang->get('user_level_short_chpref'),
-USER_LEVEL_MOD => $lang->get('user_level_short_mod'),
+							USER_LEVEL_MOD => $lang->get('user_level_short_mod'),
-USER_LEVEL_ADMIN => $lang->get('user_level_short_admin')
+							USER_LEVEL_ADMIN => $lang->get('user_level_short_admin')
-),
+						),
-'long' => array(
+					'long' => array(
-USER_LEVEL_GUEST => $lang->get('user_level_long_guest'),
+							USER_LEVEL_GUEST => $lang->get('user_level_long_guest'),
-USER_LEVEL_MEMBER => $lang->get('user_level_long_member'),
+							USER_LEVEL_MEMBER => $lang->get('user_level_long_member'),
-USER_LEVEL_CHPREF => $lang->get('user_level_long_chpref'),
+							USER_LEVEL_CHPREF => $lang->get('user_level_long_chpref'),
-USER_LEVEL_MOD => $lang->get('user_level_long_mod'),
+							USER_LEVEL_MOD => $lang->get('user_level_long_mod'),
-USER_LEVEL_ADMIN => $lang->get('user_level_long_admin')
+							USER_LEVEL_ADMIN => $lang->get('user_level_long_admin')
-),
+						),
-'l10n' => true
+					'l10n' => true
-);
+				);
-}
+		}
-$key = ( $short ) ? 'short' : 'long';
+		$key = ( $short ) ? 'short' : 'long';
-if ( isset($levels[$key][$user_level]) )
+		if ( isset($levels[$key][$user_level]) )
-{
+		{
-return $levels[$key][$user_level];
+			return $levels[$key][$user_level];
-}
+		}
-else
+		else
-{
+		{
-if ( $short )
+			if ( $short )
-{
+			{
-return ( is_object($lang) ) ? $lang->get('user_level_short_unknown', array('user_level' => $user_level)) : "Unknown - $user_level";
+				return ( is_object($lang) ) ? $lang->get('user_level_short_unknown', array('user_level' => $user_level)) : "Unknown - $user_level";
-}
+			}
-else
+			else
-{
+			{
-return ( is_object($lang) ) ? $lang->get('user_level_long_unknown', array('user_level' => $user_level)) : "Unknown level ($user_level)";
+				return ( is_object($lang) ) ? $lang->get('user_level_long_unknown', array('user_level' => $user_level)) : "Unknown level ($user_level)";
-}
+			}
-}
+		}
-return 'Linux rocks!';
+		return 'Linux rocks!';
-}
+	}
-/**
+	/**
-* Change a user's e-mail address.
+	* Change a user's e-mail address.
-* @param int $user_id The user ID of the user to update - this cannot be changed
+	* @param int $user_id The user ID of the user to update - this cannot be changed
-* @param string $email The new e-mail address
+	* @param string $email The new e-mail address
-* @return string 'success' if successful, or array of error strings on failure
+	* @return string 'success' if successful, or array of error strings on failure
-*/
+	*/
-function change_email($user_id, $email)
+	function change_email($user_id, $email)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Create some arrays
+		// Create some arrays
-$errors = array(); // Used to hold error strings
+		$errors = array(); // Used to hold error strings
-// Scan the user ID for problems
+		// Scan the user ID for problems
-if ( intval($user_id) < 1 )
+		if ( intval($user_id) < 1 )
-$errors[] = 'SQL injection attempt';
+			$errors[] = 'SQL injection attempt';
-$user_id = intval($user_id);
+		$user_id = intval($user_id);
-// Verify e-mail address
+		// Verify e-mail address
-if ( !check_email_address($email) )
+		if ( !check_email_address($email) )
-$errors[] = 'user_err_email_not_valid';
+			$errors[] = 'user_err_email_not_valid';
-if ( count($errors) > 0 )
+		if ( count($errors) > 0 )
-return $errors;
+			return $errors;
-// Make query
+		// Make query
-$email = $db->escape($email);
+		$email = $db->escape($email);
-$q = $db->sql_query('UPDATE ' . table_prefix . "users SET email = '$email' WHERE user_id = $user_id;");
+		$q = $db->sql_query('UPDATE ' . table_prefix . "users SET email = '$email' WHERE user_id = $user_id;");
-// We also need to trigger re-activation.
+		// We also need to trigger re-activation.
-switch(getConfig('account_activation', 'none'))
+		switch(getConfig('account_activation', 'none'))
-{
+		{
-case 'user':
+			case 'user':
-case 'admin':
+			case 'admin':
-// Note: even with admin activation, activation e-mails are sent when an e-mail is changed.
+				// Note: even with admin activation, activation e-mails are sent when an e-mail is changed.
-if ( $session->user_level >= USER_LEVEL_MOD && getConfig('account_activation') == 'admin' )
+				if ( $session->user_level >= USER_LEVEL_MOD && getConfig('account_activation') == 'admin' )
-// Trust admins and moderators
+					// Trust admins and moderators
-break;
+					break;
-// retrieve username
+				// retrieve username
-if ( !$username )
+				if ( !$username )
-{
+				{
-$q = $this->sql('SELECT username FROM ' . table_prefix . "users WHERE user_id = $user_id;");
+					$q = $this->sql('SELECT username FROM ' . table_prefix . "users WHERE user_id = $user_id;");
-if($db->numrows() < 1)
+					if($db->numrows() < 1)
-{
+					{
-$errors[] = 'The username could not be selected.';
+						$errors[] = 'The username could not be selected.';
-}
+					}
-else
+					else
-{
+					{
-$row = $db->fetchrow();
+						$row = $db->fetchrow();
-$username = $row['username'];
+						$username = $row['username'];
-}
+					}
-}
+				}
-if ( !$username )
+				if ( !$username )
-return $errors;
+					return $errors;
-// Generate an activation key
+				// Generate an activation key
-$actkey = sha1 ( microtime() . mt_rand() );
+				$actkey = sha1 ( microtime() . mt_rand() );
-$a = $this->send_activation_mail($username, $actkey);
+				$a = $this->send_activation_mail($username, $actkey);
-if(!$a)
+				if(!$a)
-{
+				{
-$this->admin_activation_request($username);
+					$this->admin_activation_request($username);
-}
+				}
-// Deactivate the account until e-mail is confirmed
+				// Deactivate the account until e-mail is confirmed
-$q = $db->sql_query('UPDATE ' . table_prefix . "users SET account_active = 0, activation_key = '$actkey' WHERE user_id = $user_id;");
+				$q = $db->sql_query('UPDATE ' . table_prefix . "users SET account_active = 0, activation_key = '$actkey' WHERE user_id = $user_id;");
-break;
+				break;
-}
+		}
-// Yay! We're done
+		// Yay! We're done
-return 'success';
+		return 'success';
-}
+	}
-/**
+	/**
-* Sets a user's password.
+	* Sets a user's password.
-* @param int|string User ID or username
+	* @param int|string User ID or username
-* @param string New password
+	* @param string New password
-*/
+	*/
-function set_password($user, $password)
+	function set_password($user, $password)
-{
+	{
-// Generate new password and salt
+		// Generate new password and salt
-$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
+		$hmac_secret = hexencode(AESCrypt::randkey(20), '', '');
-$password_hmac = hmac_sha1($password, $hmac_secret);
+		$password_hmac = hmac_sha1($password, $hmac_secret);
-// Figure out how we want to specify the user
+		// Figure out how we want to specify the user
-$uidcol = is_int($user) ? "user_id = $user" : ENANO_SQLFUNC_LOWERCASE . "(username) = '" . strtolower($this->prepare_text($user)) . "'";
+		$uidcol = is_int($user) ? "user_id = $user" : ENANO_SQLFUNC_LOWERCASE . "(username) = '" . strtolower($this->prepare_text($user)) . "'";
-// Perform update
+		// Perform update
-$this->sql('UPDATE ' . table_prefix . "users SET old_encryption = 0, password = '$password_hmac', password_salt = '$hmac_secret' WHERE $uidcol;");
+		$this->sql('UPDATE ' . table_prefix . "users SET old_encryption = 0, password = '$password_hmac', password_salt = '$hmac_secret' WHERE $uidcol;");
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Encrypts a string using the site's private key.
+	* Encrypts a string using the site's private key.
-* @param string
+	* @param string
-* @param int Return type - one of ENC_BINARY, ENC_HEX, ENC_BASE64
+	* @param int Return type - one of ENC_BINARY, ENC_HEX, ENC_BASE64
-* @return string
+	* @return string
-*/
+	*/
-function pk_encrypt($string, $return_type = ENC_HEX)
+	function pk_encrypt($string, $return_type = ENC_HEX)
-{
+	{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-return $aes->encrypt($string, $this->private_key, $return_type);
+		return $aes->encrypt($string, $this->private_key, $return_type);
-}
+	}
-/**
+	/**
-* Encrypts a string using the site's private key.
+	* Encrypts a string using the site's private key.
-* @param string
+	* @param string
-* @param int Input type - one of ENC_BINARY, ENC_HEX, ENC_BASE64
+	* @param int Input type - one of ENC_BINARY, ENC_HEX, ENC_BASE64
-* @return string
+	* @return string
-*/
+	*/
-function pk_decrypt($string, $input_type = ENC_HEX)
+	function pk_decrypt($string, $input_type = ENC_HEX)
-{
+	{
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-return $aes->decrypt($string, $this->private_key, $input_type);
+		return $aes->decrypt($string, $this->private_key, $input_type);
-}
+	}
-#
+	#
-# USER RANKS
+	# USER RANKS
-#
+	#
-/**
+	/**
-* SYNOPSIS OF THE RANK SYSTEM
+	* SYNOPSIS OF THE RANK SYSTEM
-* Enano's rank logic calculates a user's rank based on a precedence scale. The way things are checked is:
+	* Enano's rank logic calculates a user's rank based on a precedence scale. The way things are checked is:
-*   1. Check to see if the user has a specific rank assigned. Use that if possible.
+	*   1. Check to see if the user has a specific rank assigned. Use that if possible.
-*   2. Check the user's primary group to see if it specifies a rank. Use that if possible.
+	*   2. Check the user's primary group to see if it specifies a rank. Use that if possible.
-*   3. Check the other groups a user is in. If one that has a custom rank is encountered, use that rank.
+	*   3. Check the other groups a user is in. If one that has a custom rank is encountered, use that rank.
-*   4. See if the user's user level has a specific rank hard-coded to be associated with it. (Always overrideable as can be seen above)
+	*   4. See if the user's user level has a specific rank hard-coded to be associated with it. (Always overrideable as can be seen above)
-*   5. Use the "member" rank
+	*   5. Use the "member" rank
-*/
+	*/
-/**
+	/**
-* Generates a textual SQL query for fetching rank data to be sent to calculate_user_rank().
+	* Generates a textual SQL query for fetching rank data to be sent to calculate_user_rank().
-* @param string Text to append, possibly a WHERE clause or so
+	* @param string Text to append, possibly a WHERE clause or so
-* @return string
+	* @return string
-*/
+	*/
-function generate_rank_sql($append = '')
+	function generate_rank_sql($append = '')
-{
+	{
-// Generate level-to-rank associations
+		// Generate level-to-rank associations
-$assoc = array();
+		$assoc = array();
-foreach ( $this->level_rank_table as $level => $rank )
+		foreach ( $this->level_rank_table as $level => $rank )
-{
+		{
-$assoc[] = "        ( u.user_level = $level AND rl.rank_id = $rank )";
+			$assoc[] = "        ( u.user_level = $level AND rl.rank_id = $rank )";
-}
+		}
-$assoc = implode(" OR\n", $assoc) . "\n";
+		$assoc = implode(" OR\n", $assoc) . "\n";
-$gid_col = ( ENANO_DBLAYER == 'PGSQL' ) ?
+		$gid_col = ( ENANO_DBLAYER == 'PGSQL' ) ?
-'array_to_string(' . table_prefix . 'array_accum(m.group_id), \',\') AS group_list' :
+			'array_to_string(' . table_prefix . 'array_accum(m.group_id), \',\') AS group_list' :
-'GROUP_CONCAT(m.group_id) AS group_list';
+			'GROUP_CONCAT(m.group_id) AS group_list';
-// The actual query
+		// The actual query
-$sql = "SELECT u.user_id, u.username, u.user_level, u.user_group, u.user_rank, u.user_title, g.group_rank,\n"
+		$sql = "SELECT u.user_id, u.username, u.user_level, u.user_group, u.user_rank, u.user_title, g.group_rank,\n"
-. "       COALESCE(ru.rank_id,    rg.rank_id,    rl.rank_id,    rd.rank_id   ) AS rank_id,\n"
+				. "       COALESCE(ru.rank_id,    rg.rank_id,    rl.rank_id,    rd.rank_id   ) AS rank_id,\n"
-. "       COALESCE(ru.rank_title, rg.rank_title, rl.rank_title, rd.rank_title) AS rank_title,\n"
+				. "       COALESCE(ru.rank_title, rg.rank_title, rl.rank_title, rd.rank_title) AS rank_title,\n"
-. "       COALESCE(ru.rank_style, rg.rank_style, rl.rank_style, rd.rank_style) AS rank_style,\n"
+				. "       COALESCE(ru.rank_style, rg.rank_style, rl.rank_style, rd.rank_style) AS rank_style,\n"
-. "       rg.rank_id AS group_rank_id,\n"
+				. "       rg.rank_id AS group_rank_id,\n"
-. "       ( ru.rank_id IS NULL AND rg.rank_id IS NULL ) AS using_default,\n"
+				. "       ( ru.rank_id IS NULL AND rg.rank_id IS NULL ) AS using_default,\n"
-. "       ( ru.rank_id IS NULL AND rg.rank_id IS NOT NULL ) AS using_group,\n"
+				. "       ( ru.rank_id IS NULL AND rg.rank_id IS NOT NULL ) AS using_group,\n"
-. "       ( ru.rank_id IS NOT NULL ) AS using_user,\n"
+				. "       ( ru.rank_id IS NOT NULL ) AS using_user,\n"
-. "       u.user_rank_userset,\n"
+				. "       u.user_rank_userset,\n"
-. "       $gid_col\n"
+				. "       $gid_col\n"
-. "  FROM " . table_prefix . "users AS u\n"
+				. "  FROM " . table_prefix . "users AS u\n"
-. "  LEFT JOIN " . table_prefix . "groups AS g\n"
+				. "  LEFT JOIN " . table_prefix . "groups AS g\n"
-. "    ON ( g.group_id = u.user_group )\n"
+				. "    ON ( g.group_id = u.user_group )\n"
-. "  LEFT JOIN " . table_prefix . "group_members AS m\n"
+				. "  LEFT JOIN " . table_prefix . "group_members AS m\n"
-. "    ON ( u.user_id = m.user_id )\n"
+				. "    ON ( u.user_id = m.user_id )\n"
-. "  LEFT JOIN " . table_prefix . "ranks AS ru\n"
+				. "  LEFT JOIN " . table_prefix . "ranks AS ru\n"
-. "    ON ( u.user_rank = ru.rank_id )\n"
+				. "    ON ( u.user_rank = ru.rank_id )\n"
-. "  LEFT JOIN " . table_prefix . "ranks AS rg\n"
+				. "  LEFT JOIN " . table_prefix . "ranks AS rg\n"
-. "    ON ( g.group_rank = rg.rank_id )\n"
+				. "    ON ( g.group_rank = rg.rank_id )\n"
-. "  LEFT JOIN " . table_prefix . "ranks AS rl\n"
+				. "  LEFT JOIN " . table_prefix . "ranks AS rl\n"
-. "    ON (\n"
+				. "    ON (\n"
-. $assoc
+				. $assoc
-. "      )\n"
+				. "      )\n"
-. "  LEFT JOIN " . table_prefix . "ranks AS rd\n"
+				. "  LEFT JOIN " . table_prefix . "ranks AS rd\n"
-. "    ON ( rd.rank_id = 1 )$append\n"
+				. "    ON ( rd.rank_id = 1 )$append\n"
-. "  GROUP BY u.user_id, u.username, u.user_level, u.user_group, u.user_rank, u.user_title, u.user_rank_userset, g.group_rank,\n"
+				. "  GROUP BY u.user_id, u.username, u.user_level, u.user_group, u.user_rank, u.user_title, u.user_rank_userset, g.group_rank,\n"
-. "       ru.rank_id, ru.rank_title, ru.rank_style,rg.rank_id, rg.rank_title, rg.rank_style,\n"
+				. "       ru.rank_id, ru.rank_title, ru.rank_style,rg.rank_id, rg.rank_title, rg.rank_style,\n"
-. "       rl.rank_id, rl.rank_title, rl.rank_style,rd.rank_id, rd.rank_title, rd.rank_style;";
+				. "       rl.rank_id, rl.rank_title, rl.rank_style,rd.rank_id, rd.rank_title, rd.rank_style;";
-return $sql;
+		return $sql;
-}
+	}
-/**
+	/**
-* Returns an associative array with a user's rank information.
+	* Returns an associative array with a user's rank information.
-* The array will contain the following values:
+	* The array will contain the following values:
-*   username: string  The user's username
+	*   username: string  The user's username
-*   user_id:  integer Numerical user ID
+	*   user_id:  integer Numerical user ID
-*   rank_id:  integer Numerical rank ID
+	*   rank_id:  integer Numerical rank ID
-*   rank:     string  The user's current rank
+	*   rank:     string  The user's current rank
-*   title:    string  The user's custom user title if applicable; should be displayed one line below the rank
+	*   title:    string  The user's custom user title if applicable; should be displayed one line below the rank
-*   style:    string  CSS for the username
+	*   style:    string  CSS for the username
-* @param int|string Username *or* user ID
+	* @param int|string Username *or* user ID
-* @return array or false on failure
+	* @return array or false on failure
-*/
+	*/
-function get_user_rank($id)
+	function get_user_rank($id)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-global $user_ranks;
+		global $user_ranks;
-// cache info in RAM if possible
+		// cache info in RAM if possible
-static $_cache = array();
+		static $_cache = array();
-if ( is_int($id) && $id == 0 )
+		if ( is_int($id) && $id == 0 )
-$id = 1;
+			$id = 1;
-if ( is_int($id) )
+		if ( is_int($id) )
-$col = "u.user_id = $id";
+			$col = "u.user_id = $id";
-else if ( is_string($id) )
+		else if ( is_string($id) )
-$col = ENANO_SQLFUNC_LOWERCASE . "(username) = " . ENANO_SQLFUNC_LOWERCASE . "('" . $db->escape($id) . "')";
+			$col = ENANO_SQLFUNC_LOWERCASE . "(username) = " . ENANO_SQLFUNC_LOWERCASE . "('" . $db->escape($id) . "')";
-else
+		else
-// invalid parameter
+			// invalid parameter
-return false;
+			return false;
-// check the RAM cache
+		// check the RAM cache
-if ( isset($_cache[$id]) )
+		if ( isset($_cache[$id]) )
-return $_cache[$id];
+			return $_cache[$id];
-// check the disk cache
+		// check the disk cache
-if ( is_int($id) )
+		if ( is_int($id) )
-{
+		{
-if ( isset($user_ranks[$id]) )
+			if ( isset($user_ranks[$id]) )
-{
+			{
-$_cache[$id] =& $user_ranks[$id];
+				$_cache[$id] =& $user_ranks[$id];
-return $user_ranks[$id];
+				return $user_ranks[$id];
-}
+			}
-}
+		}
-else if ( is_string($id) )
+		else if ( is_string($id) )
-{
+		{
-foreach ( $user_ranks as $key => $valarray )
+			foreach ( $user_ranks as $key => $valarray )
-{
+			{
-if ( is_string($key) && strtolower($key) == strtolower($id) )
+				if ( is_string($key) && strtolower($key) == strtolower($id) )
-{
+				{
-$_cache[$id] = $valarray;
+					$_cache[$id] = $valarray;
-return $valarray;
+					return $valarray;
-}
+				}
-}
+			}
-}
+		}
-$sql = $this->generate_rank_sql("\n  WHERE $col");
+		$sql = $this->generate_rank_sql("\n  WHERE $col");
-$q = $this->sql($sql);
+		$q = $this->sql($sql);
-// any results?
+		// any results?
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-{
+		{
-// nuttin'.
+			// nuttin'.
-$db->free_result();
+			$db->free_result();
-$_cache[$id] = false;
+			$_cache[$id] = false;
-return false;
+			return false;
-}
+		}
-// Found something.
+		// Found something.
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-$db->free_result();
+		$db->free_result();
-$row = $this->calculate_user_rank($row);
+		$row = $this->calculate_user_rank($row);
-$_cache[$id] = $row;
+		$_cache[$id] = $row;
-return $row;
+		return $row;
-}
+	}
-/**
+	/**
-* Performs the actual rank calculation based on the contents of a row.
+	* Performs the actual rank calculation based on the contents of a row.
-* @param array
+	* @param array
-* @return array
+	* @return array
-*/
+	*/
-function calculate_user_rank($row)
+	function calculate_user_rank($row)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-global $lang;
+		global $lang;
-static $rank_cache = array();
+		static $rank_cache = array();
-static $group_ranks = array();
+		static $group_ranks = array();
-// try to cache that rank info
+		// try to cache that rank info
-if ( !isset($rank_cache[ intval($row['rank_id']) ]) && $row['rank_id'] )
+		if ( !isset($rank_cache[ intval($row['rank_id']) ]) && $row['rank_id'] )
-{
+		{
-$rank_cache[ intval($row['rank_id']) ] = array(
+			$rank_cache[ intval($row['rank_id']) ] = array(
-'rank_id' => intval($row['rank_id']),
+					'rank_id' => intval($row['rank_id']),
-'rank_title' => intval($row['rank_title']),
+					'rank_title' => intval($row['rank_title']),
-'rank_style' => intval($row['rank_style'])
+					'rank_style' => intval($row['rank_style'])
-);
+				);
-}
+		}
-// cache group info (if appropriate)
+		// cache group info (if appropriate)
-if ( $row['using_group'] && !isset($group_ranks[ intval($row['user_group']) ]) )
+		if ( $row['using_group'] && !isset($group_ranks[ intval($row['user_group']) ]) )
-{
+		{
-$group_ranks[ intval($row['user_group']) ] = intval($row['group_rank_id']);
+			$group_ranks[ intval($row['user_group']) ] = intval($row['group_rank_id']);
-}
+		}
-// sanitize and process the as-of-yet rank data
+		// sanitize and process the as-of-yet rank data
-$row['rank_id'] = intval($row["rank_id"]);
+		$row['rank_id'] = intval($row["rank_id"]);
-$row['rank_title'] = $row["rank_title"];
+		$row['rank_title'] = $row["rank_title"];
-// if we're falling back to some default, then see if we can use one of the user's other groups
+		// if we're falling back to some default, then see if we can use one of the user's other groups
-if ( $row['using_default'] && !empty($row['group_list']) )
+		if ( $row['using_default'] && !empty($row['group_list']) )
-{
+		{
-$group_list = explode(',', $row['group_list']);
+			$group_list = explode(',', $row['group_list']);
-if ( array_walk($group_list, 'intval') )
+			if ( array_walk($group_list, 'intval') )
-{
+			{
-// go through the group list and see if any of them has a rank assigned
+				// go through the group list and see if any of them has a rank assigned
-foreach ( $group_list as $group_id )
+				foreach ( $group_list as $group_id )
-{
+				{
-// cached in RAM? Preferably use that.
+					// cached in RAM? Preferably use that.
-if ( !isset($group_ranks[$group_id]) )
+					if ( !isset($group_ranks[$group_id]) )
-{
+					{
-// Not cached - grab it
+						// Not cached - grab it
-$q = $this->sql('SELECT group_rank FROM ' . table_prefix . "groups WHERE group_id = $group_id;");
+						$q = $this->sql('SELECT group_rank FROM ' . table_prefix . "groups WHERE group_id = $group_id;");
-if ( $db->numrows() < 1 )
+						if ( $db->numrows() < 1 )
-{
+						{
-$db->free_result();
+							$db->free_result();
-continue;
+							continue;
-}
+						}
-list($result) = $db->fetchrow_num();
+						list($result) = $db->fetchrow_num();
-$db->free_result();
+						$db->free_result();
-if ( $result === null || $result < 1 )
+						if ( $result === null || $result < 1 )
-{
+						{
-$group_ranks[$group_id] = false;
+							$group_ranks[$group_id] = false;
-}
+						}
-else
+						else
-{
+						{
-$group_ranks[$group_id] = intval($result);
+							$group_ranks[$group_id] = intval($result);
-}
+						}
-}
+					}
-// we've got it now
+					// we've got it now
-if ( $group_ranks[$group_id] )
+					if ( $group_ranks[$group_id] )
-{
+					{
-// found a group with a rank assigned
+						// found a group with a rank assigned
-// so get the rank info
+						// so get the rank info
-$rank_id =& $group_ranks[$group_id];
+						$rank_id =& $group_ranks[$group_id];
-if ( !isset($rank_cache[$rank_id]) )
+						if ( !isset($rank_cache[$rank_id]) )
-{
+						{
-$q = $this->sql('SELECT rank_id, rank_title, rank_style FROM ' . table_prefix . "ranks WHERE rank_id = $rank_id;");
+							$q = $this->sql('SELECT rank_id, rank_title, rank_style FROM ' . table_prefix . "ranks WHERE rank_id = $rank_id;");
-if ( $db->numrows() < 1 )
+							if ( $db->numrows() < 1 )
-{
+							{
-$db->free_result();
+								$db->free_result();
-continue;
+								continue;
-}
+							}
-$rank_cache[$rank_id] = $db->fetchrow();
+							$rank_cache[$rank_id] = $db->fetchrow();
-$db->free_result();
+							$db->free_result();
-}
+						}
-// set the final rank parameters
+						// set the final rank parameters
-// die("found member-of-group exception with uid {$row['user_id']} gid $group_id rid $rank_id rt {$rank_cache[$rank_id]['rank_title']}");
+						// die("found member-of-group exception with uid {$row['user_id']} gid $group_id rid $rank_id rt {$rank_cache[$rank_id]['rank_title']}");
-$row['rank_id'] = $rank_id;
+						$row['rank_id'] = $rank_id;
-$row['rank_title'] = $rank_cache[$rank_id]['rank_title'];
+						$row['rank_title'] = $rank_cache[$rank_id]['rank_title'];
-$row['rank_style'] = $rank_cache[$rank_id]['rank_style'];
+						$row['rank_style'] = $rank_cache[$rank_id]['rank_style'];
-break;
+						break;
-}
+					}
-}
+				}
-}
+			}
-}
+		}
-if ( $row['user_title'] === NULL )
+		if ( $row['user_title'] === NULL )
-$row['user_title'] = false;
+			$row['user_title'] = false;
-$row['user_id'] = intval($row['user_id']);
+		$row['user_id'] = intval($row['user_id']);
-$row['user_level'] = intval($row['user_level']);
+		$row['user_level'] = intval($row['user_level']);
-$row['user_group'] = intval($row['user_group']);
+		$row['user_group'] = intval($row['user_group']);
-unset($row['user_rank'], $row['group_rank'], $row['group_list'], $row['using_default'], $row['using_group'], $row['user_level'], $row['user_group'], $row['username']);
+		unset($row['user_rank'], $row['group_rank'], $row['group_list'], $row['using_default'], $row['using_group'], $row['user_level'], $row['user_group'], $row['username']);
-return $row;
+		return $row;
-}
+	}
-/**
+	/**
-* Get the list of ranks that a user is allowed to use. Returns false if they cannot change it.
+	* Get the list of ranks that a user is allowed to use. Returns false if they cannot change it.
-* @param string|int User ID or username
+	* @param string|int User ID or username
-* @return array Associative by rank ID
+	* @return array Associative by rank ID
-*/
+	*/
-function get_user_possible_ranks($id)
+	function get_user_possible_ranks($id)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// cache info in RAM if possible
+		// cache info in RAM if possible
-static $_cache = array();
+		static $_cache = array();
-if ( is_int($id) && $id == 0 )
+		if ( is_int($id) && $id == 0 )
-$id = 1;
+			$id = 1;
-if ( is_int($id) )
+		if ( is_int($id) )
-$col = "u.user_id = $id";
+			$col = "u.user_id = $id";
-else if ( is_string($id) )
+		else if ( is_string($id) )
-$col = ENANO_SQLFUNC_LOWERCASE . "(username) = " . ENANO_SQLFUNC_LOWERCASE . "('" . $db->escape($id) . "')";
+			$col = ENANO_SQLFUNC_LOWERCASE . "(username) = " . ENANO_SQLFUNC_LOWERCASE . "('" . $db->escape($id) . "')";
-else
+		else
-// invalid parameter
+			// invalid parameter
-return false;
+			return false;
-// check the RAM cache
+		// check the RAM cache
-if ( isset($_cache[$id]) )
+		if ( isset($_cache[$id]) )
-return $_cache[$id];
+			return $_cache[$id];
-$sql = $this->generate_rank_sql("\n  WHERE $col");
+		$sql = $this->generate_rank_sql("\n  WHERE $col");
-$q = $this->sql($sql);
+		$q = $this->sql($sql);
-// any results?
+		// any results?
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-{
+		{
-// nuttin'.
+			// nuttin'.
-$db->free_result();
+			$db->free_result();
-$_cache[$id] = false;
+			$_cache[$id] = false;
-return false;
+			return false;
-}
+		}
-// Found something.
+		// Found something.
-$row = $db->fetchrow();
+		$row = $db->fetchrow();
-$db->free_result();
+		$db->free_result();
-if ( $row['using_user'] && !$row['user_rank_userset'] )
+		if ( $row['using_user'] && !$row['user_rank_userset'] )
-{
+		{
-// The user's rank was set manually by an admin.
+			// The user's rank was set manually by an admin.
-$result = array(
+			$result = array(
-array(
+				array(
-'rank_id' => $row['rank_id'],
+					'rank_id' => $row['rank_id'],
-'rank_title' => $row['rank_title'],
+					'rank_title' => $row['rank_title'],
-'rank_style' => $row['rank_style'],
+					'rank_style' => $row['rank_style'],
-'rank_type' => 'user'
+					'rank_type' => 'user'
-)
+					)
-);
+				);
-$_cache[$id] = $result;
+			$_cache[$id] = $result;
-return $result;
+			return $result;
-}
+		}
-// copy the result to a more permanent array so we can reference this later
+		// copy the result to a more permanent array so we can reference this later
-$current_settings = $row;
+		$current_settings = $row;
-unset($row);
+		unset($row);
-$result = array();
+		$result = array();
-// first rank available to us will be the one set by the user's user level
+		// first rank available to us will be the one set by the user's user level
-if ( isset($this->level_rank_table[$current_settings['user_level']]) )
+		if ( isset($this->level_rank_table[$current_settings['user_level']]) )
-{
+		{
-$q = $this->sql('SELECT rank_id, rank_title, rank_style FROM ' . table_prefix . "ranks WHERE rank_id = {$this->level_rank_table[$this->user_level]};");
+			$q = $this->sql('SELECT rank_id, rank_title, rank_style FROM ' . table_prefix . "ranks WHERE rank_id = {$this->level_rank_table[$this->user_level]};");
-if ( $db->numrows() > 0 )
+			if ( $db->numrows() > 0 )
-{
+			{
-$row = $db->fetchrow();
+				$row = $db->fetchrow();
-$row['rank_type'] = 'ulevel';
+				$row['rank_type'] = 'ulevel';
-$result[] = $row;
+				$result[] = $row;
-}
+			}
-$db->free_result();
+			$db->free_result();
-}
+		}
-// for each group the user is in, figure out if it has a rank associated with it
+		// for each group the user is in, figure out if it has a rank associated with it
-$group_list = explode(',', $current_settings['group_list']);
+		$group_list = explode(',', $current_settings['group_list']);
-foreach ( $group_list as $group_id )
+		foreach ( $group_list as $group_id )
-{
+		{
-$group_id = intval($group_id);
+			$group_id = intval($group_id);
-$q = $this->sql('SELECT r.rank_id, r.rank_title, r.rank_style FROM ' . table_prefix . "groups AS g\n"
+			$q = $this->sql('SELECT r.rank_id, r.rank_title, r.rank_style FROM ' . table_prefix . "groups AS g\n"
-. "  LEFT JOIN " . table_prefix . "ranks AS r\n"
+										. "  LEFT JOIN " . table_prefix . "ranks AS r\n"
-. "    ON ( g.group_rank = r.rank_id )\n"
+										. "    ON ( g.group_rank = r.rank_id )\n"
-. "  WHERE g.group_id = $group_id\n"
+										. "  WHERE g.group_id = $group_id\n"
-. "    AND r.rank_id IS NOT NULL;");
+										. "    AND r.rank_id IS NOT NULL;");
-if ( $db->numrows() > 0 )
+			if ( $db->numrows() > 0 )
-{
+			{
-$row = $db->fetchrow();
+				$row = $db->fetchrow();
-$row['rank_type'] = 'group';
+				$row['rank_type'] = 'group';
-$result[] = $row;
+				$result[] = $row;
-}
+			}
-$db->free_result();
+			$db->free_result();
-}
+		}
-$_cache[$id] = $result;
+		$_cache[$id] = $result;
-return $result;
+		return $result;
-}
+	}
-#
+	#
-# Access Control Lists
+	# Access Control Lists
-#
+	#
-/**
+	/**
-* Creates a new permission field in memory. If the permissions are set in the database, they are used. Otherwise, $default_perm is used.
+	* Creates a new permission field in memory. If the permissions are set in the database, they are used. Otherwise, $default_perm is used.
-* @param string $acl_type An identifier for this field
+	* @param string $acl_type An identifier for this field
-* @param int $default_perm Whether permission should be granted or not if it's not specified in the ACLs.
+	* @param int $default_perm Whether permission should be granted or not if it's not specified in the ACLs.
-* @param string $desc A human readable name for the permission type
+	* @param string $desc A human readable name for the permission type
-* @param array $deps The list of dependencies - this should be an array of ACL types
+	* @param array $deps The list of dependencies - this should be an array of ACL types
-* @param string $scope Which namespaces this field should apply to. This should be either a pipe-delimited list of namespace IDs or just "All".
+	* @param string $scope Which namespaces this field should apply to. This should be either a pipe-delimited list of namespace IDs or just "All".
-*/
+	*/
-function register_acl_type($acl_type, $default_perm = AUTH_DISALLOW, $desc = false, $deps = Array(), $scope = 'All')
+	function register_acl_type($acl_type, $default_perm = AUTH_DISALLOW, $desc = false, $deps = Array(), $scope = 'All')
-{
+	{
-if(isset($this->acl_types[$acl_type]))
+		if(isset($this->acl_types[$acl_type]))
-return false;
+			return false;
-else
+		else
-{
+		{
-if(!$desc)
+			if(!$desc)
-{
+			{
-$desc = capitalize_first_letter(str_replace('_', ' ', $acl_type));
+				$desc = capitalize_first_letter(str_replace('_', ' ', $acl_type));
-}
+			}
-$this->acl_types[$acl_type] = $default_perm;
+			$this->acl_types[$acl_type] = $default_perm;
-$this->acl_descs[$acl_type] = $desc;
+			$this->acl_descs[$acl_type] = $desc;
-$this->acl_deps[$acl_type] = $deps;
+			$this->acl_deps[$acl_type] = $deps;
-$this->acl_scope[$acl_type] = explode('|', $scope);
+			$this->acl_scope[$acl_type] = explode('|', $scope);
-}
+		}
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Tells us whether permission $type is allowed or not based on the current rules.
+	* Tells us whether permission $type is allowed or not based on the current rules.
-* @param string $type The permission identifier ($acl_type passed to sessionManager::register_acl_type())
+	* @param string $type The permission identifier ($acl_type passed to sessionManager::register_acl_type())
-* @param bool $no_deps If true, disables dependency checking
+	* @param bool $no_deps If true, disables dependency checking
-* @return bool True if allowed, false if denied or if an error occured
+	* @return bool True if allowed, false if denied or if an error occured
-*/
+	*/
-function get_permissions($type, $no_deps = false)
+	function get_permissions($type, $no_deps = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( isset( $this->perms[$type] ) )
+		if ( isset( $this->perms[$type] ) )
-{
+		{
-if ( $this->perms[$type] == AUTH_DENY )
+			if ( $this->perms[$type] == AUTH_DENY )
-$ret = false;
+				$ret = false;
-else if ( $this->perms[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
+			else if ( $this->perms[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
-$ret = true;
+				$ret = true;
-else if ( $this->perms[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
+			else if ( $this->perms[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
-$ret = false;
+				$ret = false;
-else if ( $this->perms[$type] == AUTH_ALLOW )
+			else if ( $this->perms[$type] == AUTH_ALLOW )
-$ret = true;
+				$ret = true;
-else if ( $this->perms[$type] == AUTH_DISALLOW )
+			else if ( $this->perms[$type] == AUTH_DISALLOW )
-$ret = false;
+				$ret = false;
-}
+		}
-else if(isset($this->acl_types[$type]))
+		else if(isset($this->acl_types[$type]))
-{
+		{
-if ( $this->acl_types[$type] == AUTH_DENY )
+			if ( $this->acl_types[$type] == AUTH_DENY )
-$ret = false;
+				$ret = false;
-else if ( $this->acl_types[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
+			else if ( $this->acl_types[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
-$ret = true;
+				$ret = true;
-else if ( $this->acl_types[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
+			else if ( $this->acl_types[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
-$ret = false;
+				$ret = false;
-else if ( $this->acl_types[$type] == AUTH_ALLOW )
+			else if ( $this->acl_types[$type] == AUTH_ALLOW )
-$ret = true;
+				$ret = true;
-else if ( $this->acl_types[$type] == AUTH_DISALLOW )
+			else if ( $this->acl_types[$type] == AUTH_DISALLOW )
-$ret = false;
+				$ret = false;
-}
+		}
-else
+		else
-{
+		{
-// ACL type is undefined
+			// ACL type is undefined
-trigger_error('Unknown access type "' . $type . '"', E_USER_WARNING);
+			trigger_error('Unknown access type "' . $type . '"', E_USER_WARNING);
-return false; // Be on the safe side and deny access
+			return false; // Be on the safe side and deny access
-}
+		}
-if ( !$no_deps )
+		if ( !$no_deps )
-{
+		{
-if ( !$this->acl_check_deps($type) )
+			if ( !$this->acl_check_deps($type) )
-return false;
+				return false;
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Fetch the permissions that apply to the current user for the page specified. The object you get will have the get_permissions method
+	* Fetch the permissions that apply to the current user for the page specified. The object you get will have the get_permissions method
-* and several other abilities.
+	* and several other abilities.
-* @param string $page_id
+	* @param string $page_id
-* @param string $namespace
+	* @param string $namespace
-* @return object
+	* @return object
-*/
+	*/
-function fetch_page_acl($page_id, $namespace)
+	function fetch_page_acl($page_id, $namespace)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( count ( $this->acl_base_cache ) < 1 )
+		if ( count ( $this->acl_base_cache ) < 1 )
-{
+		{
-// Permissions table not yet initialized
+			// Permissions table not yet initialized
-return false;
+			return false;
-}
+		}
-// cache of permission objects (to save RAM and SQL queries)
+		// cache of permission objects (to save RAM and SQL queries)
-static $objcache = array();
+		static $objcache = array();
-if ( count($objcache) == 0 )
+		if ( count($objcache) == 0 )
-{
+		{
-foreach ( $paths->nslist as $key => $_ )
+			foreach ( $paths->nslist as $key => $_ )
-{
+			{
-$objcache[$key] = array();
+				$objcache[$key] = array();
-}
+			}
-}
+		}
-if ( isset($objcache[$namespace][$page_id]) )
+		if ( isset($objcache[$namespace][$page_id]) )
-{
+		{
-return $objcache[$namespace][$page_id];
+			return $objcache[$namespace][$page_id];
-}
+		}
-$objcache[$namespace][$page_id] = new Session_ACLPageInfo( $page_id, $namespace, $this->acl_types, $this->acl_descs, $this->acl_deps, $this->acl_base_cache );
+		$objcache[$namespace][$page_id] = new Session_ACLPageInfo( $page_id, $namespace, $this->acl_types, $this->acl_descs, $this->acl_deps, $this->acl_base_cache );
-$object =& $objcache[$namespace][$page_id];
+		$object =& $objcache[$namespace][$page_id];
-profiler_log("session: fetched ACLs for page {$namespace}:{$page_id}");
+		profiler_log("session: fetched ACLs for page {$namespace}:{$page_id}");
-return $object;
+		return $object;
-}
+	}
-/**
+	/**
-* Fetch the permissions that apply to an arbitrary user for the page specified. The object you get will have the get_permissions method
+	* Fetch the permissions that apply to an arbitrary user for the page specified. The object you get will have the get_permissions method
-* and several other abilities.
+	* and several other abilities.
-* @param int|string $user_id_or_name; user ID *or* username of the user
+	* @param int|string $user_id_or_name; user ID *or* username of the user
-* @param string $page_id; if null, will be default effective permissions.
+	* @param string $page_id; if null, will be default effective permissions.
-* @param string $namespace; if null, will be default effective permissions.
+	* @param string $namespace; if null, will be default effective permissions.
-* @return object
+	* @return object
-*/
+	*/
-function fetch_page_acl_user($user_id_or_name, $page_id, $namespace)
+	function fetch_page_acl_user($user_id_or_name, $page_id, $namespace)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// cache user info
+		// cache user info
-static $user_info_cache = null;
+		static $user_info_cache = null;
-if ( isset($user_info_cache[$user_id_or_name]) )
+		if ( isset($user_info_cache[$user_id_or_name]) )
-{
+		{
-$user_id =& $user_info_cache[$user_id_or_name]['user_id'];
+			$user_id =& $user_info_cache[$user_id_or_name]['user_id'];
-$groups =& $user_info_cache[$user_id_or_name]['groups'];
+			$groups =& $user_info_cache[$user_id_or_name]['groups'];
-}
+		}
-else
+		else
-{
+		{
-$uid_column = ( is_int($user_id_or_name) ) ? "user_id = $user_id_or_name" : "username = '" . $db->escape($user_id_or_name) . "'";
+			$uid_column = ( is_int($user_id_or_name) ) ? "user_id = $user_id_or_name" : "username = '" . $db->escape($user_id_or_name) . "'";
-$q = $db->sql_query('SELECT u.user_id, m.group_id, g.group_name FROM ' . table_prefix . "users AS u\n"
+			$q = $db->sql_query('SELECT u.user_id, m.group_id, g.group_name FROM ' . table_prefix . "users AS u\n"
-. "  LEFT JOIN " . table_prefix . "group_members AS m\n"
+												. "  LEFT JOIN " . table_prefix . "group_members AS m\n"
-. "    ON ( ( u.user_id = m.user_id AND m.pending = 0 ) OR m.member_id IS NULL )\n"
+												. "    ON ( ( u.user_id = m.user_id AND m.pending = 0 ) OR m.member_id IS NULL )\n"
-. "  LEFT JOIN " . table_prefix . "groups AS g\n"
+												. "  LEFT JOIN " . table_prefix . "groups AS g\n"
-. "    ON ( g.group_id = m.group_id )\n"
+												. "    ON ( g.group_id = m.group_id )\n"
-. "  WHERE $uid_column;");
+												. "  WHERE $uid_column;");
-if ( !$q )
+			if ( !$q )
-$db->_die();
+				$db->_die();
-// The l10n engine takes care of this later.
+			// The l10n engine takes care of this later.
-$groups = array(1 => 'Everyone');
+			$groups = array(1 => 'Everyone');
-if ( $row = $db->fetchrow() )
+			if ( $row = $db->fetchrow() )
-{
+			{
-$user_id = intval($row['user_id']);
+				$user_id = intval($row['user_id']);
-if ( $row['group_id'] )
+				if ( $row['group_id'] )
-{
+				{
-do
+					do
-{
+					{
-$groups[ intval($row['group_id'] ) ] = $row['group_name'];
+						$groups[ intval($row['group_id'] ) ] = $row['group_name'];
-}
+					}
-while ( $row = $db->fetchrow() );
+					while ( $row = $db->fetchrow() );
-}
+				}
-$db->free_result();
+				$db->free_result();
-}
+			}
-else
+			else
-{
+			{
-$db->free_result();
+				$db->free_result();
-throw new Exception('Unknown user ID or username');
+				throw new Exception('Unknown user ID or username');
-}
+			}
-$user_info_cache[$user_id_or_name] = array(
+			$user_info_cache[$user_id_or_name] = array(
-'user_id' => $user_id,
+					'user_id' => $user_id,
-'groups' => $groups
+					'groups' => $groups
-);
+				);
-}
+		}
-// cache base permissions
+		// cache base permissions
-static $base_cache = array();
+		static $base_cache = array();
-if ( !isset($base_cache[$user_id_or_name]) )
+		if ( !isset($base_cache[$user_id_or_name]) )
-{
+		{
-$base_cache[$user_id_or_name] = $this->acl_types;
+			$base_cache[$user_id_or_name] = $this->acl_types;
-$current_perms =& $base_cache[$user_id_or_name];
+			$current_perms =& $base_cache[$user_id_or_name];
-$current_perms['__resolve_table'] = array();
+			$current_perms['__resolve_table'] = array();
-$bs = 'SELECT rules, target_type, target_id, rule_id, page_id, namespace, g.group_name FROM '.table_prefix."acl AS a\n"
+			$bs = 'SELECT rules, target_type, target_id, rule_id, page_id, namespace, g.group_name FROM '.table_prefix."acl AS a\n"
-. "  LEFT JOIN " . table_prefix . "groups AS g\n"
+					. "  LEFT JOIN " . table_prefix . "groups AS g\n"
-. "    ON ( ( a.target_type = " . ACL_TYPE_GROUP . " AND a.target_id = g.group_id ) OR ( a.target_type != " . ACL_TYPE_GROUP . " ) )\n"
+					. "    ON ( ( a.target_type = " . ACL_TYPE_GROUP . " AND a.target_id = g.group_id ) OR ( a.target_type != " . ACL_TYPE_GROUP . " ) )\n"
-. '  WHERE page_id IS NULL AND namespace IS NULL AND' . "\n"
+					. '  WHERE page_id IS NULL AND namespace IS NULL AND' . "\n"
-. '  ( ';
+					. '  ( ';
-$q = Array();
+			$q = Array();
-$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id= ' . $user_id . ' )';
+			$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id= ' . $user_id . ' )';
-if(count($groups) > 0)
+			if(count($groups) > 0)
-{
+			{
-foreach($groups as $g_id => $g_name)
+				foreach($groups as $g_id => $g_name)
-{
+				{
-$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
+					$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
-}
+				}
-}
+			}
-$bs .= implode(" OR \n    ", $q) . " ) \n  ORDER BY target_type ASC, target_id ASC;";
+			$bs .= implode(" OR \n    ", $q) . " ) \n  ORDER BY target_type ASC, target_id ASC;";
-$q = $this->sql($bs);
+			$q = $this->sql($bs);
-foreach ( $this->acl_types as $perm_type => $_ )
+			foreach ( $this->acl_types as $perm_type => $_ )
-{
+			{
-// init the resolver table with blanks
+				// init the resolver table with blanks
-$current_perms['__resolve_table'][$perm_type] = array(
+				$current_perms['__resolve_table'][$perm_type] = array(
-'src' => ACL_INHERIT_ENANO_DEFAULT,
+						'src' => ACL_INHERIT_ENANO_DEFAULT,
-'rule_id' => -1
+						'rule_id' => -1
-);
+					);
-}
+			}
-if ( $row = $db->fetchrow() )
+			if ( $row = $db->fetchrow() )
-{
+			{
-do {
+				do {
-$rules = $this->string_to_perm($row['rules']);
+					$rules = $this->string_to_perm($row['rules']);
-$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
+					$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
-// track where these rulings are coming from
+					// track where these rulings are coming from
-$src = ( $is_everyone ) ? ACL_INHERIT_GLOBAL_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_GLOBAL_GROUP : ACL_INHERIT_GLOBAL_USER );
+					$src = ( $is_everyone ) ? ACL_INHERIT_GLOBAL_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_GLOBAL_GROUP : ACL_INHERIT_GLOBAL_USER );
-foreach ( $rules as $perm_type => $_ )
+					foreach ( $rules as $perm_type => $_ )
-{
+					{
-$current_perms['__resolve_table'][$perm_type] = array(
+						$current_perms['__resolve_table'][$perm_type] = array(
-'src' => $src,
+								'src' => $src,
-'rule_id' => $row['rule_id']
+								'rule_id' => $row['rule_id']
-);
+							);
-if ( $row['group_name'] )
+						if ( $row['group_name'] )
-{
+						{
-$current_perms['__resolve_table'][$perm_type]['group_name'] = $row['group_name'];
+							$current_perms['__resolve_table'][$perm_type]['group_name'] = $row['group_name'];
-}
+						}
-}
+					}
-// merge it in
+					// merge it in
-$current_perms = $this->acl_merge($current_perms, $rules, $is_everyone, $_defaults_used);
+					$current_perms = $this->acl_merge($current_perms, $rules, $is_everyone, $_defaults_used);
-} while ( $row = $db->fetchrow() );
+				} while ( $row = $db->fetchrow() );
-}
+			}
-}
+		}
-// cache of permission objects (to save RAM and SQL queries)
+		// cache of permission objects (to save RAM and SQL queries)
-static $objcache = array();
+		static $objcache = array();
-if ( count($objcache) == 0 )
+		if ( count($objcache) == 0 )
-{
+		{
-foreach ( $paths->nslist as $key => $_ )
+			foreach ( $paths->nslist as $key => $_ )
-{
+			{
-$objcache[$key] = array();
+				$objcache[$key] = array();
-}
+			}
-}
+		}
-if ( !isset($objcache[$namespace][$page_id]) )
+		if ( !isset($objcache[$namespace][$page_id]) )
-{
+		{
-$objcache[$namespace][$page_id] = array();
+			$objcache[$namespace][$page_id] = array();
-}
+		}
-if ( isset($objcache[$namespace][$page_id][$user_id_or_name]) )
+		if ( isset($objcache[$namespace][$page_id][$user_id_or_name]) )
-{
+		{
-return $objcache[$namespace][$page_id][$user_id_or_name];
+			return $objcache[$namespace][$page_id][$user_id_or_name];
-}
+		}
-//if ( !isset( $paths->pages[$paths->nslist[$namespace] . $page_id] ) )
+		//if ( !isset( $paths->pages[$paths->nslist[$namespace] . $page_id] ) )
-//{
+		//{
-//  // Page does not exist
+		//  // Page does not exist
-//  return false;
+		//  return false;
-//}
+		//}
-$objcache[$namespace][$page_id][$user_id_or_name] = new Session_ACLPageInfo(
+		$objcache[$namespace][$page_id][$user_id_or_name] = new Session_ACLPageInfo(
-$page_id,                                        // $page_id,
+			$page_id,                                        // $page_id,
-$namespace,                                      // $namespace,
+			$namespace,                                      // $namespace,
-$this->acl_types,                                // $acl_types,
+			$this->acl_types,                                // $acl_types,
-$this->acl_descs,                                // $acl_descs,
+			$this->acl_descs,                                // $acl_descs,
-$this->acl_deps,                                 // $acl_deps,
+			$this->acl_deps,                                 // $acl_deps,
-$base_cache[$user_id_or_name],                   // $base,
+			$base_cache[$user_id_or_name],                   // $base,
-$user_info_cache[$user_id_or_name]['user_id'],   // $user_id = null,
+			$user_info_cache[$user_id_or_name]['user_id'],   // $user_id = null,
-$user_info_cache[$user_id_or_name]['groups'],    // $groups = null,
+			$user_info_cache[$user_id_or_name]['groups'],    // $groups = null,
-$base_cache[$user_id_or_name]['__resolve_table'] // $resolve_table = array()
+			$base_cache[$user_id_or_name]['__resolve_table'] // $resolve_table = array()
-);
+		);
-$object =& $objcache[$namespace][$page_id][$user_id_or_name];
+		$object =& $objcache[$namespace][$page_id][$user_id_or_name];
-return $object;
+		return $object;
-}
+	}
-/**
+	/**
-* Checks if the given ACL rule type applies to a namespace.
+	* Checks if the given ACL rule type applies to a namespace.
-* @param string ACL rule type
+	* @param string ACL rule type
-* @param string Namespace
+	* @param string Namespace
-* @return bool
+	* @return bool
-*/
+	*/
-function check_acl_scope($acl_rule, $namespace)
+	function check_acl_scope($acl_rule, $namespace)
-{
+	{
-if ( !isset($this->acl_scope[$acl_rule]) )
+		if ( !isset($this->acl_scope[$acl_rule]) )
-return false;
+			return false;
-if ( $this->acl_scope[$acl_rule] === array('All') )
+		if ( $this->acl_scope[$acl_rule] === array('All') )
-return true;
+			return true;
-return ( in_array($namespace, $this->acl_scope[$acl_rule]) ) ? true : false;
+		return ( in_array($namespace, $this->acl_scope[$acl_rule]) ) ? true : false;
-}
+	}
-/**
+	/**
-* Read all of our permissions from the database and process/apply them. This should be called after the page is determined.
+	* Read all of our permissions from the database and process/apply them. This should be called after the page is determined.
-* @access private
+	* @access private
-*/
+	*/
-function init_permissions()
+	function init_permissions()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Initialize the permissions list with some defaults
+		// Initialize the permissions list with some defaults
-$this->perms = $this->acl_types;
+		$this->perms = $this->acl_types;
-$this->acl_defaults_used = $this->perms;
+		$this->acl_defaults_used = $this->perms;
-// Fetch sitewide defaults from the permissions table
+		// Fetch sitewide defaults from the permissions table
-$bs = 'SELECT rules, target_type, target_id FROM '.table_prefix.'acl' . "\n"
+		$bs = 'SELECT rules, target_type, target_id FROM '.table_prefix.'acl' . "\n"
-. '  WHERE page_id IS NULL AND namespace IS NULL AND' . "\n"
+						. '  WHERE page_id IS NULL AND namespace IS NULL AND' . "\n"
-. '  ( ';
+						. '  ( ';
-$q = Array();
+		$q = Array();
-$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id='.$this->user_id.' )';
+		$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id='.$this->user_id.' )';
-if(count($this->groups) > 0)
+		if(count($this->groups) > 0)
-{
+		{
-foreach($this->groups as $g_id => $g_name)
+			foreach($this->groups as $g_id => $g_name)
-{
+			{
-$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
+				$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
-}
+			}
-}
+		}
-$bs .= implode(" OR \n    ", $q) . " ) \n  ORDER BY target_type ASC, target_id ASC;";
+		$bs .= implode(" OR \n    ", $q) . " ) \n  ORDER BY target_type ASC, target_id ASC;";
-$q = $this->sql($bs);
+		$q = $this->sql($bs);
-if ( $row = $db->fetchrow() )
+		if ( $row = $db->fetchrow() )
-{
+		{
-do {
+			do {
-$rules = $this->string_to_perm($row['rules']);
+				$rules = $this->string_to_perm($row['rules']);
-$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
+				$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
-$this->acl_merge_with_current($rules, $is_everyone);
+				$this->acl_merge_with_current($rules, $is_everyone);
-} while ( $row = $db->fetchrow() );
+			} while ( $row = $db->fetchrow() );
-}
+		}
-// Cache the sitewide permissions for later use
+		// Cache the sitewide permissions for later use
-$this->acl_base_cache = $this->perms;
+		$this->acl_base_cache = $this->perms;
-profiler_log('session: base ACL set calculated');
+		profiler_log('session: base ACL set calculated');
-// Load and calculate permissions for the current page
+		// Load and calculate permissions for the current page
-$page_acl = $this->fetch_page_acl($paths->page_id, $paths->namespace);
+		$page_acl = $this->fetch_page_acl($paths->page_id, $paths->namespace);
-$this->perms = $page_acl->perms;
+		$this->perms = $page_acl->perms;
-$this->acl_defaults_used = $page_acl->acl_defaults_used;
+		$this->acl_defaults_used = $page_acl->acl_defaults_used;
-}
+	}
-/**
+	/**
-* Extends the scope of a permission type.
+	* Extends the scope of a permission type.
-* @param string The name of the permission type
+	* @param string The name of the permission type
-* @param string The namespace(s) that should be covered. This can be either one namespace ID or a pipe-delimited list.
+	* @param string The namespace(s) that should be covered. This can be either one namespace ID or a pipe-delimited list.
-* @param object Optional - the current $paths object, in case we're doing this from the acl_rule_init hook
+	* @param object Optional - the current $paths object, in case we're doing this from the acl_rule_init hook
-*/
+	*/
-function acl_extend_scope($perm_type, $namespaces, &$p_in)
+	function acl_extend_scope($perm_type, $namespaces, &$p_in)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$p_obj = ( is_object($p_in) ) ? $p_in : $paths;
+		$p_obj = ( is_object($p_in) ) ? $p_in : $paths;
-$nslist = explode('|', $namespaces);
+		$nslist = explode('|', $namespaces);
-foreach ( $nslist as $i => $ns )
+		foreach ( $nslist as $i => $ns )
-{
+		{
-if ( !isset($p_obj->nslist[$ns]) )
+			if ( !isset($p_obj->nslist[$ns]) )
-{
+			{
-unset($nslist[$i]);
+				unset($nslist[$i]);
-}
+			}
-else
+			else
-{
+			{
-if ( $this->acl_scope[$perm_type] !== array('All') )
+				if ( $this->acl_scope[$perm_type] !== array('All') )
-$this->acl_scope[$perm_type][] = $ns;
+					$this->acl_scope[$perm_type][] = $ns;
-if ( isset($this->acl_types[$perm_type]) && !isset($this->perms[$perm_type]) )
+				if ( isset($this->acl_types[$perm_type]) && !isset($this->perms[$perm_type]) )
-{
+				{
-$this->perms[$perm_type] = $this->acl_types[$perm_type];
+					$this->perms[$perm_type] = $this->acl_types[$perm_type];
-}
+				}
-}
+			}
-}
+		}
-}
+	}
-/**
+	/**
-* Converts a permissions field into a string for database insertion. Similar in spirit to serialize().
+	* Converts a permissions field into a string for database insertion. Similar in spirit to serialize().
-* @param array $perms An associative array with only integers as values
+	* @param array $perms An associative array with only integers as values
-* @return string
+	* @return string
-*/
+	*/
-function perm_to_string($perms)
+	function perm_to_string($perms)
-{
+	{
-$s = '';
+		$s = '';
-foreach($perms as $perm => $ac)
+		foreach($perms as $perm => $ac)
-{
+		{
-if ( $ac == 'i' )
+			if ( $ac == 'i' )
-continue;
+				continue;
-$s .= "$perm=$ac;";
+			$s .= "$perm=$ac;";
-}
+		}
-return $s;
+		return $s;
-}
+	}
-/**
+	/**
-* Converts a permissions string back to an array.
+	* Converts a permissions string back to an array.
-* @param string $perms The result from sessionManager::perm_to_string()
+	* @param string $perms The result from sessionManager::perm_to_string()
-* @return array
+	* @return array
-*/
+	*/
-function string_to_perm($perms)
+	function string_to_perm($perms)
-{
+	{
-$ret = Array();
+		$ret = Array();
-preg_match_all('#([a-z0-9_-]+)=([0-9]+);#i', $perms, $matches);
+		preg_match_all('#([a-z0-9_-]+)=([0-9]+);#i', $perms, $matches);
-foreach($matches[1] as $i => $t)
+		foreach($matches[1] as $i => $t)
-{
+		{
-$ret[$t] = intval($matches[2][$i]);
+			$ret[$t] = intval($matches[2][$i]);
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Merges two ACL arrays. Both parameters should be permission list arrays. The second group takes precedence over the first, but AUTH_DENY always prevails.
+	* Merges two ACL arrays. Both parameters should be permission list arrays. The second group takes precedence over the first, but AUTH_DENY always prevails.
-* @param array $perm1 The first set of permissions
+	* @param array $perm1 The first set of permissions
-* @param array $perm2 The second set of permissions
+	* @param array $perm2 The second set of permissions
-* @param bool $is_everyone If true, applies exceptions for "Everyone" group
+	* @param bool $is_everyone If true, applies exceptions for "Everyone" group
-* @param array|reference $defaults_used Array that will be filled with default usage data
+	* @param array|reference $defaults_used Array that will be filled with default usage data
-* @return array
+	* @return array
-*/
+	*/
-function acl_merge($perm1, $perm2, $is_everyone = false, &$defaults_used = array())
+	function acl_merge($perm1, $perm2, $is_everyone = false, &$defaults_used = array())
-{
+	{
-$ret = $perm1;
+		$ret = $perm1;
-if ( !is_array(@$defaults_used) )
+		if ( !is_array(@$defaults_used) )
-{
+		{
-$defaults_used = array();
+			$defaults_used = array();
-}
+		}
-foreach ( $perm1 as $i => $p )
+		foreach ( $perm1 as $i => $p )
-{
+		{
-if ( isset($perm2[$i]) )
+			if ( isset($perm2[$i]) )
-{
+			{
-if ( $is_everyone && isset($defaults_used[$i]) && $defaults_used[$i] === false )
+				if ( $is_everyone && isset($defaults_used[$i]) && $defaults_used[$i] === false )
-continue;
+					continue;
-// Decide precedence
+				// Decide precedence
-if ( isset($defaults_used[$i]) )
+				if ( isset($defaults_used[$i]) )
-{
+				{
-// echo "$i: default in use, overriding to: {$perm2[$i]}<br />";
+					// echo "$i: default in use, overriding to: {$perm2[$i]}<br />";
-// Defaults are in use, override
+					// Defaults are in use, override
-// CHANGED - 1.1.4:
+					// CHANGED - 1.1.4:
-// For some time this has been intentionally relaxed so that the following
+					// For some time this has been intentionally relaxed so that the following
-// exception is available to Deny permissions:
+					// exception is available to Deny permissions:
-//   If the rule applies to the group "Everyone" on the entire site,
+					//   If the rule applies to the group "Everyone" on the entire site,
-//   Deny settings could be overriden.
+					//   Deny settings could be overriden.
-// This is documented at: http://docs.enanocms.org/Help:4.2
+					// This is documented at: http://docs.enanocms.org/Help:4.2
-if ( $perm1[$i] != AUTH_DENY )
+					if ( $perm1[$i] != AUTH_DENY )
-{
+					{
-$perm1[$i] = $perm2[$i];
+						$perm1[$i] = $perm2[$i];
-$defaults_used[$i] = ( $is_everyone );
+						$defaults_used[$i] = ( $is_everyone );
-}
+					}
-}
+				}
-else
+				else
-{
+				{
-// echo "$i: default NOT in use";
+					// echo "$i: default NOT in use";
-// Defaults are not in use, merge as normal
+					// Defaults are not in use, merge as normal
-if ( $perm1[$i] != AUTH_DENY )
+					if ( $perm1[$i] != AUTH_DENY )
-{
+					{
-// echo ", but overriding";
+						// echo ", but overriding";
-$perm1[$i] = $perm2[$i];
+						$perm1[$i] = $perm2[$i];
-}
+					}
-// echo "<br />";
+					// echo "<br />";
-}
+				}
-}
+			}
-}
+		}
-return $perm1;
+		return $perm1;
-}
+	}
-/**
+	/**
-* Merges two ACL arrays, but instead of calculating inheritance for missing permission types, just returns 'i' for that type. Useful
+	* Merges two ACL arrays, but instead of calculating inheritance for missing permission types, just returns 'i' for that type. Useful
-* for explicitly requiring inheritance in ACL editing interfaces
+	* for explicitly requiring inheritance in ACL editing interfaces
-* @param array $perm1 The first set of permissions
+	* @param array $perm1 The first set of permissions
-* @param array $perm2 The second, authoritative set of permissions
+	* @param array $perm2 The second, authoritative set of permissions
-*/
+	*/
-function acl_merge_inherit($perm1, $perm2)
+	function acl_merge_inherit($perm1, $perm2)
-{
+	{
-foreach ( $perm1 as $type => $level )
+		foreach ( $perm1 as $type => $level )
-{
+		{
-$perm1[$type][$level] = 'i';
+			$perm1[$type][$level] = 'i';
-}
+		}
-$ret = $perm1;
+		$ret = $perm1;
-foreach ( $perm2 as $type => $level )
+		foreach ( $perm2 as $type => $level )
-{
+		{
-if ( isset( $ret[$type] ) )
+			if ( isset( $ret[$type] ) )
-{
+			{
-if ( $ret[$type] != AUTH_DENY )
+				if ( $ret[$type] != AUTH_DENY )
-$ret[$type] = $level;
+					$ret[$type] = $level;
-}
+			}
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Merges the ACL array sent with the current permissions table, deciding precedence based on whether defaults are in effect or not.
+	* Merges the ACL array sent with the current permissions table, deciding precedence based on whether defaults are in effect or not.
-* @param array The array to merge into the master ACL list
+	* @param array The array to merge into the master ACL list
-* @param bool If true, $perm is treated as the "new default"
+	* @param bool If true, $perm is treated as the "new default"
-* @param int 1 if this is a site-wide ACL, 2 if page-specific. Defaults to 2.
+	* @param int 1 if this is a site-wide ACL, 2 if page-specific. Defaults to 2.
-*/
+	*/
-function acl_merge_with_current($perm, $is_everyone = false, $scope = 2)
+	function acl_merge_with_current($perm, $is_everyone = false, $scope = 2)
-{
+	{
-$this->perms = $this->acl_merge($this->perms, $perm, $is_everyone, $this->acl_defaults_used);
+		$this->perms = $this->acl_merge($this->perms, $perm, $is_everyone, $this->acl_defaults_used);
-}
+	}
-/**
+	/**
-* Merges two ACL arrays. Both parameters should be permission list arrays. The second group takes precedence
+	* Merges two ACL arrays. Both parameters should be permission list arrays. The second group takes precedence
-* over the first, without exceptions. This is used to merge the hardcoded defaults with admin-specified
+	* over the first, without exceptions. This is used to merge the hardcoded defaults with admin-specified
-* defaults, which take precedence.
+	* defaults, which take precedence.
-* @param array $perm1 The first set of permissions
+	* @param array $perm1 The first set of permissions
-* @param array $perm2 The second set of permissions
+	* @param array $perm2 The second set of permissions
-* @return array
+	* @return array
-*/
+	*/
-function acl_merge_complete($perm1, $perm2)
+	function acl_merge_complete($perm1, $perm2)
-{
+	{
-$ret = $perm1;
+		$ret = $perm1;
-foreach ( $perm2 as $type => $level )
+		foreach ( $perm2 as $type => $level )
-{
+		{
-$ret[$type] = $level;
+			$ret[$type] = $level;
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Tell us if the dependencies for a given permission are met.
+	* Tell us if the dependencies for a given permission are met.
-* @param string The ACL permission ID
+	* @param string The ACL permission ID
-* @return bool
+	* @return bool
-*/
+	*/
-function acl_check_deps($type, $debug = false)
+	function acl_check_deps($type, $debug = false)
-{
+	{
-global $paths;
+		global $paths;
-// This will only happen if the permissions table is hacked or improperly accessed
+		// This will only happen if the permissions table is hacked or improperly accessed
-if(!isset($this->acl_deps[$type]))
+		if(!isset($this->acl_deps[$type]))
-return true;
+			return true;
-// Permission has no dependencies?
+		// Permission has no dependencies?
-if(sizeof($this->acl_deps[$type]) < 1)
+		if(sizeof($this->acl_deps[$type]) < 1)
-return true;
+			return true;
-// go through them all and build a flat list of dependencies
+		// go through them all and build a flat list of dependencies
-$deps = $this->acl_deps[$type];
+		$deps = $this->acl_deps[$type];
-while(true)
+		while(true)
-{
+		{
-$j = sizeof($deps);
+			$j = sizeof($deps);
-for ( $i = 0; $i < $j; $i++ )
+			for ( $i = 0; $i < $j; $i++ )
-{
+			{
-$b = $deps;
+				$b = $deps;
-if ( !$this->check_acl_scope($deps[$i], $paths->namespace) )
+				if ( !$this->check_acl_scope($deps[$i], $paths->namespace) )
-{
+				{
-// Action $type depends on action $deps[$i] which cannot be satisfied because $deps[$i] is out of scope.
+					// Action $type depends on action $deps[$i] which cannot be satisfied because $deps[$i] is out of scope.
-// echo '<pre>' . enano_debug_print_backtrace(true) . '</pre>';
+					// echo '<pre>' . enano_debug_print_backtrace(true) . '</pre>';
-trigger_error("acl_check_deps: $type depends on {$deps[$i]} which is not within scope of $paths->namespace; this indicats a bug in ACL rule specification", E_USER_WARNING);
+					trigger_error("acl_check_deps: $type depends on {$deps[$i]} which is not within scope of $paths->namespace; this indicats a bug in ACL rule specification", E_USER_WARNING);
-return false;
+					return false;
-}
+				}
-$deps = array_merge($deps, $this->acl_deps[$deps[$i]]);
+				$deps = array_merge($deps, $this->acl_deps[$deps[$i]]);
-if( $b == $deps )
+				if( $b == $deps )
-{
+				{
-break 2;
+					break 2;
-}
+				}
-$j = sizeof($deps);
+				$j = sizeof($deps);
-}
+			}
-}
+		}
-$debugdata = array();
+		$debugdata = array();
-foreach($deps as $d)
+		foreach($deps as $d)
-{
+		{
-// Our dependencies are fully resolved, so tell get_permissions() to not recursively call this function
+			// Our dependencies are fully resolved, so tell get_permissions() to not recursively call this function
-if ( !$this->get_permissions($d, true) )
+			if ( !$this->get_permissions($d, true) )
-{
+			{
-if ( $debug )
+				if ( $debug )
-{
+				{
-$debugdata[] = $d;
+					$debugdata[] = $d;
-}
+				}
-else
+				else
-{
+				{
-return false;
+					return false;
-}
+				}
-}
+			}
-}
+		}
-return $debug ? $debugdata : true;
+		return $debug ? $debugdata : true;
-}
+	}
-/**
+	/**
-* Makes a CAPTCHA code and caches the code in the database
+	* Makes a CAPTCHA code and caches the code in the database
-* @param int $len The length of the code, in bytes
+	* @param int $len The length of the code, in bytes
-* @param string Optional, the hash to reuse
+	* @param string Optional, the hash to reuse
-* @return string A unique identifier assigned to the code. This hash should be passed to sessionManager::getCaptcha() to retrieve the code.
+	* @return string A unique identifier assigned to the code. This hash should be passed to sessionManager::getCaptcha() to retrieve the code.
-*/
+	*/
-function make_captcha($len = 7, $hash = '')
+	function make_captcha($len = 7, $hash = '')
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$code = $this->generate_captcha_code($len);
+		$code = $this->generate_captcha_code($len);
-if ( !preg_match('/^[a-f0-9]{32}([a-z0-9]{8})?$/', $hash) )
+		if ( !preg_match('/^[a-f0-9]{32}([a-z0-9]{8})?$/', $hash) )
-$hash = md5(microtime() . mt_rand());
+			$hash = md5(microtime() . mt_rand());
-$session_data = $db->escape(serialize(array()));
+		$session_data = $db->escape(serialize(array()));
-// sanity check
+		// sanity check
-if ( !is_valid_ip(@$_SERVER['REMOTE_ADDR']) || !is_int($this->user_id) )
+		if ( !is_valid_ip(@$_SERVER['REMOTE_ADDR']) || !is_int($this->user_id) )
-return false;
+			return false;
-$this->sql('DELETE FROM ' . table_prefix . "captcha WHERE session_id = '$hash';");
+		$this->sql('DELETE FROM ' . table_prefix . "captcha WHERE session_id = '$hash';");
-$this->sql('INSERT INTO ' . table_prefix . 'captcha(session_id, code, session_data, source_ip, user_id)' . " VALUES('$hash', '$code', '$session_data', '{$_SERVER['REMOTE_ADDR']}', {$this->user_id});");
+		$this->sql('INSERT INTO ' . table_prefix . 'captcha(session_id, code, session_data, source_ip, user_id)' . " VALUES('$hash', '$code', '$session_data', '{$_SERVER['REMOTE_ADDR']}', {$this->user_id});");
-return $hash;
+		return $hash;
-}
+	}
-/**
+	/**
-* Generates a "pronouncable" or "human-friendly" word using various phonics rules
+	* Generates a "pronouncable" or "human-friendly" word using various phonics rules
-* @param int Optional. The length of the word.
+	* @param int Optional. The length of the word.
-* @return string
+	* @return string
-*/
+	*/
-function generate_captcha_code($len = 7)
+	function generate_captcha_code($len = 7)
-{
+	{
-// don't use k and x, they get mixed up a lot
+		// don't use k and x, they get mixed up a lot
-$consonants = 'bcdfghmnpqrsvwyz';
+		$consonants = 'bcdfghmnpqrsvwyz';
-$vowels = 'aeiou';
+		$vowels = 'aeiou';
-$prev = 'vowel';
+		$prev = 'vowel';
-$prev_l = '';
+		$prev_l = '';
-$word = '';
+		$word = '';
-$allow_next_vowel = true;
+		$allow_next_vowel = true;
-for ( $i = 0; $i < $len; $i++ )
+		for ( $i = 0; $i < $len; $i++ )
-{
+		{
-if ( $prev == 'vowel' )
+			if ( $prev == 'vowel' )
-{
+			{
-$allow_next_vowel = false;
+				$allow_next_vowel = false;
-if ( $prev_l == 'o' && mt_rand(0, 3) == 3 && $allow_next_vowel )
+				if ( $prev_l == 'o' && mt_rand(0, 3) == 3 && $allow_next_vowel )
-$word .= 'i';
+					$word .= 'i';
-else if ( $prev_l == 'q' && mt_rand(0, 3) != 1 && $allow_next_vowel )
+				else if ( $prev_l == 'q' && mt_rand(0, 3) != 1 && $allow_next_vowel )
-$word .= 'u';
+					$word .= 'u';
-else if ( $prev_l == 'o' && mt_rand(0, 3) == 2 && $allow_next_vowel )
+				else if ( $prev_l == 'o' && mt_rand(0, 3) == 2 && $allow_next_vowel )
-$word .= 'u';
+					$word .= 'u';
-else if ( $prev_l == 'a' && mt_rand(0, 3) == 3 && $allow_next_vowel )
+				else if ( $prev_l == 'a' && mt_rand(0, 3) == 3 && $allow_next_vowel )
-$word .= 'i';
+					$word .= 'i';
-else if ( $prev_l == 'a' && mt_rand(0, 10) == 7 && $allow_next_vowel )
+				else if ( $prev_l == 'a' && mt_rand(0, 10) == 7 && $allow_next_vowel )
-$word .= 'o';
+					$word .= 'o';
-else if ( $prev_l == 'a' && mt_rand(0, 7) == 2 && $allow_next_vowel )
+				else if ( $prev_l == 'a' && mt_rand(0, 7) == 2 && $allow_next_vowel )
-$word .= 'u';
+					$word .= 'u';
-else
+				else
-{
+				{
-$allow_next_vowel = true;
+					$allow_next_vowel = true;
-$word .= $consonants{mt_rand(0, (strlen($consonants)-1))};
+					$word .= $consonants{mt_rand(0, (strlen($consonants)-1))};
-}
+				}
-}
+			}
-else if ( $prev == 'consonant' )
+			else if ( $prev == 'consonant' )
-{
+			{
-if ( $prev_l == 'p' && mt_rand(0, 7) == 4 )
+				if ( $prev_l == 'p' && mt_rand(0, 7) == 4 )
-$word .= 't';
+					$word .= 't';
-else if ( $prev_l == 'p' && mt_rand(0, 5) == 1 )
+				else if ( $prev_l == 'p' && mt_rand(0, 5) == 1 )
-$word .= 'h';
+					$word .= 'h';
-else
+				else
-$word .= $vowels{mt_rand(0, (strlen($vowels)-1))};
+					$word .= $vowels{mt_rand(0, (strlen($vowels)-1))};
-}
+			}
-$prev_l = substr($word, -1);
+			$prev_l = substr($word, -1);
-$l = ( mt_rand(0, 1) == 1 ) ? strtoupper($prev_l) : strtolower($prev_l);
+			$l = ( mt_rand(0, 1) == 1 ) ? strtoupper($prev_l) : strtolower($prev_l);
-$word = substr($word, 0, -1) . $l;
+			$word = substr($word, 0, -1) . $l;
-if ( strstr('aeiou', $prev_l) )
+			if ( strstr('aeiou', $prev_l) )
-$prev = 'vowel';
+				$prev = 'vowel';
-else
+			else
-$prev = 'consonant';
+				$prev = 'consonant';
-}
+		}
-return $word;
+		return $word;
-}
+	}
-/**
+	/**
-* For the given code ID, returns the correct CAPTCHA code, or false on failure
+	* For the given code ID, returns the correct CAPTCHA code, or false on failure
-* @param string $hash The unique ID assigned to the code
+	* @param string $hash The unique ID assigned to the code
-* @param bool If true, the code is NOT deleted from the database. Use with caution!
+	* @param bool If true, the code is NOT deleted from the database. Use with caution!
-* @return string The correct confirmation code
+	* @return string The correct confirmation code
-*/
+	*/
-function get_captcha($hash, $nodelete = false)
+	function get_captcha($hash, $nodelete = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( !preg_match('/^[a-f0-9]{32}([a-z0-9]{8})?$/', $hash) )
+		if ( !preg_match('/^[a-f0-9]{32}([a-z0-9]{8})?$/', $hash) )
-{
+		{
-die("session manager: bad captcha_hash $hash");
+			die("session manager: bad captcha_hash $hash");
-return false;
+			return false;
-}
+		}
-// sanity check
+		// sanity check
-if ( !is_valid_ip(@$_SERVER['REMOTE_ADDR']) )
+		if ( !is_valid_ip(@$_SERVER['REMOTE_ADDR']) )
-{
+		{
-die("session manager insanity: bad REMOTE_ADDR or invalid UID");
+			die("session manager insanity: bad REMOTE_ADDR or invalid UID");
-return false;
+			return false;
-}
+		}
-$q = $this->sql('SELECT code_id, code FROM ' . table_prefix . "captcha WHERE session_id = '$hash' AND source_ip = '{$_SERVER['REMOTE_ADDR']}';");
+		$q = $this->sql('SELECT code_id, code FROM ' . table_prefix . "captcha WHERE session_id = '$hash' AND source_ip = '{$_SERVER['REMOTE_ADDR']}';");
-if ( $db->numrows() < 1 )
+		if ( $db->numrows() < 1 )
-{
+		{
-return false;
+			return false;
-}
+		}
-list($code_id, $code) = $db->fetchrow_num();
+		list($code_id, $code) = $db->fetchrow_num();
-$db->free_result();
+		$db->free_result();
-// delete it
+		// delete it
-if ( !$nodelete )
+		if ( !$nodelete )
-$this->sql('DELETE FROM ' . table_prefix . "captcha WHERE code_id = $code_id;");
+			$this->sql('DELETE FROM ' . table_prefix . "captcha WHERE code_id = $code_id;");
-return $code;
+		return $code;
-}
+	}
-/**
+	/**
-* (AS OF 1.0.2: Deprecated. Captcha codes are now killed on first fetch for security.) Deletes all CAPTCHA codes cached in the DB for this user.
+	* (AS OF 1.0.2: Deprecated. Captcha codes are now killed on first fetch for security.) Deletes all CAPTCHA codes cached in the DB for this user.
-*/
+	*/
-function kill_captcha()
+	function kill_captcha()
-{
+	{
-return true;
+		return true;
-}
+	}
-/**
+	/**
-* Generates a random password.
+	* Generates a random password.
-* @param int $length Optional - length of password
+	* @param int $length Optional - length of password
-* @return string
+	* @return string
-*/
+	*/
-function random_pass($length = 10)
+	function random_pass($length = 10)
-{
+	{
-$valid_chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+@#%&<>';
+		$valid_chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+@#%&<>';
-$valid_chars = enano_str_split($valid_chars);
+		$valid_chars = enano_str_split($valid_chars);
-$ret = '';
+		$ret = '';
-for ( $i = 0; $i < $length; $i++ )
+		for ( $i = 0; $i < $length; $i++ )
-{
+		{
-$ret .= $valid_chars[mt_rand(0, count($valid_chars)-1)];
+			$ret .= $valid_chars[mt_rand(0, count($valid_chars)-1)];
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Generates some Javascript that calls the AES encryption library. Put this after your </form>.
+	* Generates some Javascript that calls the AES encryption library. Put this after your </form>.
-* @param string The name of the form
+	* @param string The name of the form
-* @param string The name of the password field
+	* @param string The name of the password field
-* @param string The name of the field that switches encryption on or off
+	* @param string The name of the field that switches encryption on or off
-* @param string The name of the field that contains the encryption key
+	* @param string The name of the field that contains the encryption key
-* @param string The name of the field that will contain the encrypted password
+	* @param string The name of the field that will contain the encrypted password
-* @param string The name of the field that handles MD5 challenge data
+	* @param string The name of the field that handles MD5 challenge data
-* @param string The name of the field that tells if the server supports DiffieHellman
+	* @param string The name of the field that tells if the server supports DiffieHellman
-* @param string The name of the field with the DiffieHellman public key
+	* @param string The name of the field with the DiffieHellman public key
-* @param string The name of the field that the client should populate with its public key
+	* @param string The name of the field that the client should populate with its public key
-* @return string
+	* @return string
-*/
+	*/
-function aes_javascript($form_name, $pw_field, $use_crypt = 'use_crypt', $crypt_key = 'crypt_key', $crypt_data = 'crypt_data', $challenge = 'challenge_data', $dh_supported = 'dh_supported', $dh_pubkey = 'dh_public_key', $dh_client_pubkey = 'dh_client_public_key')
+	function aes_javascript($form_name, $pw_field, $use_crypt = 'use_crypt', $crypt_key = 'crypt_key', $crypt_data = 'crypt_data', $challenge = 'challenge_data', $dh_supported = 'dh_supported', $dh_pubkey = 'dh_public_key', $dh_client_pubkey = 'dh_client_public_key')
-{
+	{
-$code = '
+		$code = '
-<script type="text/javascript">
+			<script type="text/javascript">
-function runEncryption(nowhiteout)
+					function runEncryption(nowhiteout)
-{
+					{
-var frm = document.forms.'.$form_name.';
+						var frm = document.forms.'.$form_name.';
-if ( !nowhiteout )
+						if ( !nowhiteout )
-whiteOutForm(frm);
+							whiteOutForm(frm);
-load_component(\'crypto\');
+						load_component(\'crypto\');
-var testpassed = ' . ( ( isset($_GET['use_crypt']) && $_GET['use_crypt']=='0') ? 'false; // CRYPTO-AUTH DISABLED ON USER REQUEST // ' : '' ) . '( aes_self_test() && md5_vm_test() );
+						var testpassed = ' . ( ( isset($_GET['use_crypt']) && $_GET['use_crypt']=='0') ? 'false; // CRYPTO-AUTH DISABLED ON USER REQUEST // ' : '' ) . '( aes_self_test() && md5_vm_test() );
-var use_diffiehellman = false;' . "\n";
+						var use_diffiehellman = false;' . "\n";
-if ( $dh_supported && $dh_pubkey )
+		if ( $dh_supported && $dh_pubkey )
-{
+		{
-$code .= <<<EOF
+			$code .= <<<EOF
-if ( frm.$dh_supported.value == 'true' && !is_iPhone )
+						if ( frm.$dh_supported.value == 'true' && !is_iPhone )
-use_diffiehellman = true;
+							use_diffiehellman = true;
 EOF;
-}
+		}
-$code .= '
+		$code .= '
-if ( frm[\'' . $dh_supported . '\'] )
+						if ( frm[\'' . $dh_supported . '\'] )
-{
+						{
-frm[\'' . $dh_supported . '\'].value = ( use_diffiehellman ) ? "true" : "false";
+							frm[\'' . $dh_supported . '\'].value = ( use_diffiehellman ) ? "true" : "false";
-}
+						}
-if ( frm["' . $pw_field . '_confirm"] )
+						if ( frm["' . $pw_field . '_confirm"] )
-{
+						{
-pass1 = frm.' . $pw_field . '.value;
+							pass1 = frm.' . $pw_field . '.value;
-pass2 = frm.' . $pw_field . '_confirm.value;
+							pass2 = frm.' . $pw_field . '_confirm.value;
-if ( pass1 != pass2 )
+							if ( pass1 != pass2 )
-{
+							{
-load_component("l10n");
+								load_component("l10n");
-alert($lang.get("userfuncs_passreset_err_no_match"));
+								alert($lang.get("userfuncs_passreset_err_no_match"));
-return false;
+								return false;
-}
+							}
-if ( pass1.length < 6 )
+							if ( pass1.length < 6 )
-{
+							{
-load_component("l10n");
+								load_component("l10n");
-alert($lang.get("userfuncs_passreset_err_too_short"));
+								alert($lang.get("userfuncs_passreset_err_too_short"));
-return false;
+								return false;
-}
+							}
-frm.' . $pw_field . '_confirm.value = "";
+							frm.' . $pw_field . '_confirm.value = "";
-}
+						}
-if ( testpassed && use_diffiehellman )
+						if ( testpassed && use_diffiehellman )
-{
+						{
-// try to blank out the table to prevent double submits and what have you
+							// try to blank out the table to prevent double submits and what have you
-var el = frm.' . $pw_field . ';
+							var el = frm.' . $pw_field . ';
-while ( el.tagName != "BODY" && el.tagName != "TABLE" )
+							while ( el.tagName != "BODY" && el.tagName != "TABLE" )
-{
+							{
-el = el.parentNode;
+								el = el.parentNode;
-}
+							}
-/*
+							/*
-if ( el.tagName == "TABLE" )
+							if ( el.tagName == "TABLE" )
-{
+							{
-whiteOutElement(el);
+								whiteOutElement(el);
-}
+							}
-*/
+							*/
-frm.'.$use_crypt.'.value = \'yes_dh\';
+							frm.'.$use_crypt.'.value = \'yes_dh\';
-// Perform Diffie Hellman stuff
+							// Perform Diffie Hellman stuff
-// console.info("DiffieHellman: started keygen process");
+							// console.info("DiffieHellman: started keygen process");
-var dh_priv = dh_gen_private();
+							var dh_priv = dh_gen_private();
-var dh_pub = dh_gen_public(dh_priv);
+							var dh_pub = dh_gen_public(dh_priv);
-var secret = dh_gen_shared_secret(dh_priv, frm.' . $dh_pubkey . '.value);
+							var secret = dh_gen_shared_secret(dh_priv, frm.' . $dh_pubkey . '.value);
-// console.info("DiffieHellman: finished keygen process");
+							// console.info("DiffieHellman: finished keygen process");
-// secret_hash is used to verify that the server guesses the correct secret
+							// secret_hash is used to verify that the server guesses the correct secret
-var secret_hash = hex_sha1(secret);
+							var secret_hash = hex_sha1(secret);
-// give the server our values
+							// give the server our values
-frm.' . $crypt_key . '.value = secret_hash;
+							frm.' . $crypt_key . '.value = secret_hash;
-' . ( $dh_supported ? 'frm.' . $dh_client_pubkey . '.value = dh_pub;' : '' ) . '
+							' . ( $dh_supported ? 'frm.' . $dh_client_pubkey . '.value = dh_pub;' : '' ) . '
-// console.info("DiffieHellman: set public values");
+							// console.info("DiffieHellman: set public values");
-// crypt_key is the actual AES key
+							// crypt_key is the actual AES key
-var crypt_key = (hex_sha256(secret)).substr(0, (keySizeInBits / 4));
+							var crypt_key = (hex_sha256(secret)).substr(0, (keySizeInBits / 4));
-// Perform encryption
+							// Perform encryption
-crypt_key = hexToByteArray(crypt_key);
+							crypt_key = hexToByteArray(crypt_key);
-var pass = frm.'.$pw_field.'.value;
+							var pass = frm.'.$pw_field.'.value;
-pass = stringToByteArray(pass);
+							pass = stringToByteArray(pass);
-var cryptstring = rijndaelEncrypt(pass, crypt_key, \'ECB\');
+							var cryptstring = rijndaelEncrypt(pass, crypt_key, \'ECB\');
-if(!cryptstring)
+							if(!cryptstring)
-{
+							{
-return false;
+								return false;
-}
+							}
-cryptstring = byteArrayToHex(cryptstring);
+							cryptstring = byteArrayToHex(cryptstring);
-// console.info("DiffieHellman: finished AES");
+							// console.info("DiffieHellman: finished AES");
-frm.'.$crypt_data.'.value = cryptstring;
+							frm.'.$crypt_data.'.value = cryptstring;
-frm.'.$pw_field.'.value = \'\';
+							frm.'.$pw_field.'.value = \'\';
-// console.info("DiffieHellman: ready to submit");
+							// console.info("DiffieHellman: ready to submit");
-}
+						}
-else if ( testpassed && !use_diffiehellman )
+						else if ( testpassed && !use_diffiehellman )
-{
+						{
-frm.'.$use_crypt.'.value = \'yes\';
+							frm.'.$use_crypt.'.value = \'yes\';
-var cryptkey = frm.'.$crypt_key.'.value;
+							var cryptkey = frm.'.$crypt_key.'.value;
-frm.'.$crypt_key.'.value = hex_md5(cryptkey);
+							frm.'.$crypt_key.'.value = hex_md5(cryptkey);
-cryptkey = hexToByteArray(cryptkey);
+							cryptkey = hexToByteArray(cryptkey);
-if(!cryptkey || ( ( typeof cryptkey == \'string\' || typeof cryptkey == \'object\' ) ) && cryptkey.length != keySizeInBits / 8 )
+							if(!cryptkey || ( ( typeof cryptkey == \'string\' || typeof cryptkey == \'object\' ) ) && cryptkey.length != keySizeInBits / 8 )
-{
+							{
-if ( frm._login ) frm._login.disabled = true;
+								if ( frm._login ) frm._login.disabled = true;
-len = ( typeof cryptkey == \'string\' || typeof cryptkey == \'object\' ) ? \'\\nLen: \'+cryptkey.length : \'\';
+								len = ( typeof cryptkey == \'string\' || typeof cryptkey == \'object\' ) ? \'\\nLen: \'+cryptkey.length : \'\';
-alert(\'The key is messed up\\nType: \'+typeof(cryptkey)+len);
+								alert(\'The key is messed up\\nType: \'+typeof(cryptkey)+len);
-}
+							}
-pass = frm.'.$pw_field.'.value;
+							pass = frm.'.$pw_field.'.value;
-chal = frm.'.$challenge.'.value;
+							chal = frm.'.$challenge.'.value;
-challenge = hex_md5(pass + chal) + chal;
+							challenge = hex_md5(pass + chal) + chal;
-frm.'.$challenge.'.value = challenge;
+							frm.'.$challenge.'.value = challenge;
-pass = stringToByteArray(pass);
+							pass = stringToByteArray(pass);
-cryptstring = rijndaelEncrypt(pass, cryptkey, \'ECB\');
+							cryptstring = rijndaelEncrypt(pass, cryptkey, \'ECB\');
-if(!cryptstring)
+							if(!cryptstring)
-{
+							{
-return false;
+								return false;
-}
+							}
-cryptstring = byteArrayToHex(cryptstring);
+							cryptstring = byteArrayToHex(cryptstring);
-frm.'.$crypt_data.'.value = cryptstring;
+							frm.'.$crypt_data.'.value = cryptstring;
-frm.'.$pw_field.'.value = \'\';
+							frm.'.$pw_field.'.value = \'\';
-}
+						}
-}
+					}
-</script>
+				</script>
-';
+				';
-return $code;
+		return $code;
-}
+	}
-/**
+	/**
-* Generates the HTML form elements required for an encrypted logon experience.
+	* Generates the HTML form elements required for an encrypted logon experience.
-* @return string
+	* @return string
-*/
+	*/
-function generate_aes_form()
+	function generate_aes_form()
-{
+	{
-$return = '<input type="hidden" name="use_crypt" value="no" />';
+		$return = '<input type="hidden" name="use_crypt" value="no" />';
-$return .= '<input type="hidden" name="crypt_key" value="' . $this->rijndael_genkey() . '" />';
+		$return .= '<input type="hidden" name="crypt_key" value="' . $this->rijndael_genkey() . '" />';
-$return .= '<input type="hidden" name="crypt_data" value="" />';
+		$return .= '<input type="hidden" name="crypt_data" value="" />';
-$return .= '<input type="hidden" name="challenge_data" value="' . $this->dss_rand() . '" />';
+		$return .= '<input type="hidden" name="challenge_data" value="' . $this->dss_rand() . '" />';
-require_once(ENANO_ROOT . '/includes/math.php');
+		require_once(ENANO_ROOT . '/includes/math.php');
-require_once(ENANO_ROOT . '/includes/diffiehellman.php');
+		require_once(ENANO_ROOT . '/includes/diffiehellman.php');
-global $dh_supported, $_math;
+		global $dh_supported, $_math;
-if ( $dh_supported )
+		if ( $dh_supported )
-{
+		{
-$dh_key_priv = dh_gen_private();
+			$dh_key_priv = dh_gen_private();
-$dh_key_pub = dh_gen_public($dh_key_priv);
+			$dh_key_pub = dh_gen_public($dh_key_priv);
-$dh_key_priv = $_math->str($dh_key_priv);
+			$dh_key_priv = $_math->str($dh_key_priv);
-$dh_key_pub = $_math->str($dh_key_pub);
+			$dh_key_pub = $_math->str($dh_key_pub);
-// store the keys in the DB
+			// store the keys in the DB
-$this->sql('INSERT INTO ' . table_prefix . "diffiehellman( public_key, private_key ) VALUES ( '$dh_key_pub', '$dh_key_priv' );");
+			$this->sql('INSERT INTO ' . table_prefix . "diffiehellman( public_key, private_key ) VALUES ( '$dh_key_pub', '$dh_key_priv' );");
-$return .=  "<input type=\"hidden\" name=\"dh_supported\" value=\"true\" />
+			$return .=  "<input type=\"hidden\" name=\"dh_supported\" value=\"true\" />
-<input type=\"hidden\" name=\"dh_public_key\" value=\"$dh_key_pub\" />
+						<input type=\"hidden\" name=\"dh_public_key\" value=\"$dh_key_pub\" />
-<input type=\"hidden\" name=\"dh_client_public_key\" value=\"\" />";
+						<input type=\"hidden\" name=\"dh_client_public_key\" value=\"\" />";
-}
+		}
-else
+		else
-{
+		{
-$return .=  "<input type=\"hidden\" name=\"dh_supported\" value=\"false\" />";
+			$return .=  "<input type=\"hidden\" name=\"dh_supported\" value=\"false\" />";
-}
+		}
-return $return;
+		return $return;
-}
+	}
-/**
+	/**
-* If you used all the same form fields as the normal login interface, this will take care of DiffieHellman for you and return the key.
+	* If you used all the same form fields as the normal login interface, this will take care of DiffieHellman for you and return the key.
-* @param string Password field name (defaults to "password")
+	* @param string Password field name (defaults to "password")
-* @return string
+	* @return string
-*/
+	*/
-function get_aes_post($fieldname = 'password')
+	function get_aes_post($fieldname = 'password')
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+		$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-if ( $_POST['use_crypt'] == 'yes' )
+		if ( $_POST['use_crypt'] == 'yes' )
-{
+		{
-$crypt_key = $this->fetch_public_key($_POST['crypt_key']);
+			$crypt_key = $this->fetch_public_key($_POST['crypt_key']);
-if ( !$crypt_key )
+			if ( !$crypt_key )
-{
+			{
-throw new Exception($lang->get('user_err_key_not_found'));
+				throw new Exception($lang->get('user_err_key_not_found'));
-}
+			}
-$crypt_key = hexdecode($crypt_key);
+			$crypt_key = hexdecode($crypt_key);
-$data = $aes->decrypt($_POST['crypt_data'], $crypt_key, ENC_HEX);
+			$data = $aes->decrypt($_POST['crypt_data'], $crypt_key, ENC_HEX);
-}
+		}
-else if ( $_POST['use_crypt'] == 'yes_dh' )
+		else if ( $_POST['use_crypt'] == 'yes_dh' )
-{
+		{
-require_once(ENANO_ROOT . '/includes/math.php');
+			require_once(ENANO_ROOT . '/includes/math.php');
-require_once(ENANO_ROOT . '/includes/diffiehellman.php');
+			require_once(ENANO_ROOT . '/includes/diffiehellman.php');
-global $dh_supported, $_math;
+			global $dh_supported, $_math;
-if ( !$dh_supported )
+			if ( !$dh_supported )
-{
+			{
-throw new Exception('Server does not support DiffieHellman, denying request');
+				throw new Exception('Server does not support DiffieHellman, denying request');
-}
+			}
-// Fetch private key
+			// Fetch private key
-$dh_public = $_POST['dh_public_key'];
+			$dh_public = $_POST['dh_public_key'];
-if ( !ctype_digit($dh_public) )
+			if ( !ctype_digit($dh_public) )
-{
+			{
-throw new Exception('ERR_DH_KEY_NOT_INTEGER');
+				throw new Exception('ERR_DH_KEY_NOT_INTEGER');
-}
+			}
-$q = $db->sql_query('SELECT private_key, key_id FROM ' . table_prefix . "diffiehellman WHERE public_key = '$dh_public';");
+			$q = $db->sql_query('SELECT private_key, key_id FROM ' . table_prefix . "diffiehellman WHERE public_key = '$dh_public';");
-if ( !$q )
+			if ( !$q )
-$db->die_json();
+				$db->die_json();
-if ( $db->numrows() < 1 )
+			if ( $db->numrows() < 1 )
-{
+			{
-throw new Exception('ERR_DH_KEY_NOT_FOUND');
+				throw new Exception('ERR_DH_KEY_NOT_FOUND');
-}
+			}
-list($dh_private, $dh_key_id) = $db->fetchrow_num();
+			list($dh_private, $dh_key_id) = $db->fetchrow_num();
-$db->free_result();
+			$db->free_result();
-// We have the private key, now delete the key pair, we no longer need it
+			// We have the private key, now delete the key pair, we no longer need it
-$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE key_id = $dh_key_id;");
+			$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE key_id = $dh_key_id;");
-if ( !$q )
+			if ( !$q )
-$db->die_json();
+				$db->die_json();
-// Generate the shared secret
+			// Generate the shared secret
-$dh_secret = dh_gen_shared_secret($dh_private, $_POST['dh_client_public_key']);
+			$dh_secret = dh_gen_shared_secret($dh_private, $_POST['dh_client_public_key']);
-$dh_secret = $_math->str($dh_secret);
+			$dh_secret = $_math->str($dh_secret);
-// Did we get all our math right?
+			// Did we get all our math right?
-$dh_secret_check = sha1($dh_secret);
+			$dh_secret_check = sha1($dh_secret);
-$dh_hash = $_POST['crypt_key'];
+			$dh_hash = $_POST['crypt_key'];
-if ( $dh_secret_check !== $dh_hash )
+			if ( $dh_secret_check !== $dh_hash )
-{
+			{
-throw new Exception('ERR_DH_HASH_NO_MATCH');
+				throw new Exception('ERR_DH_HASH_NO_MATCH');
-}
+			}
-// All good! Generate the AES key
+			// All good! Generate the AES key
-$aes_key = substr(sha256($dh_secret), 0, ( AES_BITS / 4 ));
+			$aes_key = substr(sha256($dh_secret), 0, ( AES_BITS / 4 ));
-// decrypt user info
+			// decrypt user info
-$aes_key = hexdecode($aes_key);
+			$aes_key = hexdecode($aes_key);
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+			$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-$data = $aes->decrypt($_POST['crypt_data'], $aes_key, ENC_HEX);
+			$data = $aes->decrypt($_POST['crypt_data'], $aes_key, ENC_HEX);
-}
+		}
-else
+		else
-{
+		{
-$data = $_POST[$fieldname];
+			$data = $_POST[$fieldname];
-}
+		}
-return $data;
+		return $data;
-}
+	}
-/**
+	/**
-* Backend code for the JSON login interface. Basically a frontend to the session API that takes all parameters in one huge array.
+	* Backend code for the JSON login interface. Basically a frontend to the session API that takes all parameters in one huge array.
-* @param array LoginAPI request
+	* @param array LoginAPI request
-* @return array LoginAPI response
+	* @return array LoginAPI response
-*/
+	*/
-function process_login_request($req, $_dbgtmp = false)
+	function process_login_request($req, $_dbgtmp = false)
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// Setup EnanoMath and Diffie-Hellman
+		// Setup EnanoMath and Diffie-Hellman
-global $dh_supported;
+		global $dh_supported;
-if ( !function_exists('dh_gen_private') )
+		if ( !function_exists('dh_gen_private') )
-{
+		{
-require_once(ENANO_ROOT.'/includes/math.php');
+			require_once(ENANO_ROOT.'/includes/math.php');
-$dh_supported = true;
+			$dh_supported = true;
-try
+			try
-{
+			{
-require_once(ENANO_ROOT . '/includes/diffiehellman.php');
+				require_once(ENANO_ROOT . '/includes/diffiehellman.php');
-}
+			}
-catch ( Exception $e )
+			catch ( Exception $e )
-{
+			{
-$dh_supported = false;
+				$dh_supported = false;
-}
+			}
-}
+		}
-global $_math;
+		global $_math;
-// Check for the mode
+		// Check for the mode
-if ( !isset($req['mode']) )
+		if ( !isset($req['mode']) )
-{
+		{
-return $this->get_login_response('api_error', 'ERR_JSON_NO_MODE');
+			return $this->get_login_response('api_error', 'ERR_JSON_NO_MODE');
-}
+		}
-// Main processing switch
+		// Main processing switch
-switch ( $req['mode'] )
+		switch ( $req['mode'] )
-{
+		{
-default:
+			default:
-return $this->get_login_response('api_error', 'ERR_JSON_INVALID_MODE');
+				return $this->get_login_response('api_error', 'ERR_JSON_INVALID_MODE');
-break;
+				break;
-case 'getkey':
+			case 'getkey':
-$this->start();
+				$this->start();
-return $this->get_login_response('initial');
+				return $this->get_login_response('initial');
-break;
+				break;
-case 'login_dh':
+			case 'login_dh':
-// User is requesting a login and has sent Diffie-Hellman data.
+				// User is requesting a login and has sent Diffie-Hellman data.
-//
+				//
-// KEY RECONSTRUCTION
+				// KEY RECONSTRUCTION
-//
+				//
-$userinfo_crypt = $req['userinfo'];
+				$userinfo_crypt = $req['userinfo'];
-$dh_public = $req['dh_public_key'];
+				$dh_public = $req['dh_public_key'];
-$dh_hash = $req['dh_secret_hash'];
+				$dh_hash = $req['dh_secret_hash'];
-// Check the key
+				// Check the key
-if ( !ctype_digit($dh_public) || !ctype_digit($req['dh_client_key']) )
+				if ( !ctype_digit($dh_public) || !ctype_digit($req['dh_client_key']) )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_DH_KEY_NOT_NUMERIC');
+					return $this->get_login_response('api_error', 'ERR_DH_KEY_NOT_NUMERIC');
-}
+				}
-// Fetch private key
+				// Fetch private key
-$q = $db->sql_query('SELECT private_key, key_id FROM ' . table_prefix . "diffiehellman WHERE public_key = '$dh_public';");
+				$q = $db->sql_query('SELECT private_key, key_id FROM ' . table_prefix . "diffiehellman WHERE public_key = '$dh_public';");
-if ( !$q )
+				if ( !$q )
-$db->die_json();
+					$db->die_json();
-if ( $db->numrows() < 1 )
+				if ( $db->numrows() < 1 )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_DH_KEY_NOT_FOUND');
+					return $this->get_login_response('api_error', 'ERR_DH_KEY_NOT_FOUND');
-}
+				}
-list($dh_private, $dh_key_id) = $db->fetchrow_num();
+				list($dh_private, $dh_key_id) = $db->fetchrow_num();
-$db->free_result();
+				$db->free_result();
-// We have the private key, now delete the key pair, we no longer need it
+				// We have the private key, now delete the key pair, we no longer need it
-$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE key_id = $dh_key_id;");
+				$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE key_id = $dh_key_id;");
-if ( !$q )
+				if ( !$q )
-$db->die_json();
+					$db->die_json();
-// Generate the shared secret
+				// Generate the shared secret
-$dh_secret = dh_gen_shared_secret($dh_private, $req['dh_client_key']);
+				$dh_secret = dh_gen_shared_secret($dh_private, $req['dh_client_key']);
-$dh_secret = $_math->str($dh_secret);
+				$dh_secret = $_math->str($dh_secret);
-// Did we get all our math right?
+				// Did we get all our math right?
-$dh_secret_check = sha1($dh_secret);
+				$dh_secret_check = sha1($dh_secret);
-if ( $dh_secret_check !== $dh_hash )
+				if ( $dh_secret_check !== $dh_hash )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_DH_HASH_NO_MATCH');
+					return $this->get_login_response('api_error', 'ERR_DH_HASH_NO_MATCH');
-}
+				}
-// All good! Generate the AES key
+				// All good! Generate the AES key
-$aes_key = substr(sha256($dh_secret), 0, ( AES_BITS / 4 ));
+				$aes_key = substr(sha256($dh_secret), 0, ( AES_BITS / 4 ));
-case 'login_aes':
+			case 'login_aes':
-if ( $req['mode'] == 'login_aes' )
+				if ( $req['mode'] == 'login_aes' )
-{
+				{
-// login_aes-specific code
+					// login_aes-specific code
-$aes_key = $this->fetch_public_key($req['key_aes']);
+					$aes_key = $this->fetch_public_key($req['key_aes']);
-if ( !$aes_key )
+					if ( !$aes_key )
-{
+					{
-return $this->get_login_response('api_error', 'ERR_AES_LOOKUP_FAILED');
+						return $this->get_login_response('api_error', 'ERR_AES_LOOKUP_FAILED');
-}
+					}
-$userinfo_crypt = $req['userinfo'];
+					$userinfo_crypt = $req['userinfo'];
-}
+				}
-// shared between the two systems from here on out
+				// shared between the two systems from here on out
-// decrypt user info
+				// decrypt user info
-$aes_key = hexdecode($aes_key);
+				$aes_key = hexdecode($aes_key);
-$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
+				$aes = AESCrypt::singleton(AES_BITS, AES_BLOCKSIZE);
-// using "true" here disables caching of the decrypted login info (which includes the password)
+				// using "true" here disables caching of the decrypted login info (which includes the password)
-$userinfo_json = $aes->decrypt($userinfo_crypt, $aes_key, ENC_HEX, true);
+				$userinfo_json = $aes->decrypt($userinfo_crypt, $aes_key, ENC_HEX, true);
-if ( !$userinfo_json )
+				if ( !$userinfo_json )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_AES_DECRYPT_FAILED');
+					return $this->get_login_response('api_error', 'ERR_AES_DECRYPT_FAILED');
-}
+				}
-// de-JSON user info
+				// de-JSON user info
-try
+				try
-{
+				{
-$userinfo = enano_json_decode($userinfo_json);
+					$userinfo = enano_json_decode($userinfo_json);
-}
+				}
-catch ( Exception $e )
+				catch ( Exception $e )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_USERINFO_DECODE_FAILED');
+					return $this->get_login_response('api_error', 'ERR_USERINFO_DECODE_FAILED');
-}
+				}
-case 'login_pt':
+			case 'login_pt':
-// plaintext login
+				// plaintext login
-if ( $req['mode'] == 'login_pt' )
+				if ( $req['mode'] == 'login_pt' )
-{
+				{
-$userinfo = isset($req['userinfo']) ? $req['userinfo'] : array();
+					$userinfo = isset($req['userinfo']) ? $req['userinfo'] : array();
-}
+				}
-if ( !isset($userinfo['username']) || !isset($userinfo['password']) )
+				if ( !isset($userinfo['username']) || !isset($userinfo['password']) )
-{
+				{
-return $this->get_login_response('api_error', 'ERR_USERINFO_MISSING_VALUES');
+					return $this->get_login_response('api_error', 'ERR_USERINFO_MISSING_VALUES');
-}
+				}
-$username =& $userinfo['username'];
+				$username =& $userinfo['username'];
-$password =& $userinfo['password'];
+				$password =& $userinfo['password'];
-// locked out? check captcha
+				// locked out? check captcha
-$lockout_data = $this->get_lockout_info();
+				$lockout_data = $this->get_lockout_info();
-if ( $lockout_data['policy'] == 'captcha' && $lockout_data['active'] )
+				if ( $lockout_data['policy'] == 'captcha' && $lockout_data['active'] )
-{
+				{
-// policy is captcha -- check if it's correct, and if so, bypass lockout check
+					// policy is captcha -- check if it's correct, and if so, bypass lockout check
-$real_code = $this->get_captcha($req['captcha_hash']);
+					$real_code = $this->get_captcha($req['captcha_hash']);
-if ( strtolower($real_code) !== strtolower($req['captcha_code']) )
+					if ( strtolower($real_code) !== strtolower($req['captcha_code']) )
-{
+					{
-// captcha is bad
+						// captcha is bad
-return $this->get_login_response('login_failure', 'lockout_bad_captcha');
+						return $this->get_login_response('login_failure', 'lockout_bad_captcha');
-}
+					}
-}
+				}
-else if ( $lockout_data['policy'] == 'lockout' && $lockout_data['active'] )
+				else if ( $lockout_data['policy'] == 'lockout' && $lockout_data['active'] )
-{
+				{
-// we're fully locked out
+					// we're fully locked out
-return $this->get_login_response('login_failure', 'lockout_request_denied');
+					return $this->get_login_response('login_failure', 'lockout_request_denied');
-}
+				}
-// At this point if any extra info was injected into the login data packet, we need to let plugins process it
+				// At this point if any extra info was injected into the login data packet, we need to let plugins process it
-/**
+				/**
-* Called upon processing an incoming login request. If you added anything to the userinfo object during the jshook
+				* Called upon processing an incoming login request. If you added anything to the userinfo object during the jshook
-* login_build_userinfo, that will be in the $userinfo array here. Expected return values are: true if your plugin has
+				* login_build_userinfo, that will be in the $userinfo array here. Expected return values are: true if your plugin has
-* not only succeeded but ALSO issued a session key (bypass the whole Enano builtin login process) and an associative array
+				* not only succeeded but ALSO issued a session key (bypass the whole Enano builtin login process) and an associative array
-* with "mode" set to "error" and an error string in "error" to send an error back to the client. Any return value other
+				* with "mode" set to "error" and an error string in "error" to send an error back to the client. Any return value other
-* than these will be treated as a pass-through, and the user's password will be validated through Enano's standard process.
+				* than these will be treated as a pass-through, and the user's password will be validated through Enano's standard process.
-* @hook login_process_userdata_json
+				* @hook login_process_userdata_json
-*/
+				*/
-$code = $plugins->setHook('login_process_userdata_json', true);
+				$code = $plugins->setHook('login_process_userdata_json', true);
-foreach ( $code as $cmd )
+				foreach ( $code as $cmd )
-{
+				{
-$result = eval($cmd);
+					$result = eval($cmd);
-if ( $result === true )
+					if ( $result === true )
-{
+					{
-return $this->get_login_response('login_success', false, array(
+						return $this->get_login_response('login_success', false, array(
-'key' => $this->sid_super,
+								'key' => $this->sid_super,
-'user_id' => $this->user_id,
+								'user_id' => $this->user_id,
-'user_level' => $this->user_level,
+								'user_level' => $this->user_level,
-'reset' => false
+								'reset' => false
-));
+							));
-}
+					}
-else if ( is_array($result) )
+					else if ( is_array($result) )
-{
+					{
-if ( isset($result['mode']) && $result['mode'] === 'error' && isset($result['error']) )
+						if ( isset($result['mode']) && $result['mode'] === 'error' && isset($result['error']) )
-{
+						{
-// Pass back any additional information from the error response
+							// Pass back any additional information from the error response
-$append = $result;
+							$append = $result;
-unset($append['mode'], $append['error']);
+							unset($append['mode'], $append['error']);
-$append['from_plugin'] = true;
+							$append['from_plugin'] = true;
-return $this->get_login_response('login_failure', $result['error'], $append);
+							return $this->get_login_response('login_failure', $result['error'], $append);
-}
+						}
-}
+					}
-}
+				}
-// attempt the login
+				// attempt the login
-$login_result = $this->login_without_crypto($username, $password, false, intval($req['level']), @$req['remember']);
+				$login_result = $this->login_without_crypto($username, $password, false, intval($req['level']), @$req['remember']);
-if ( $login_result['success'] )
+				if ( $login_result['success'] )
-{
+				{
-return $this->get_login_response('login_success', false, array(
+					return $this->get_login_response('login_success', false, array(
-'key' => $this->sid_super,
+							'key' => $this->sid_super,
-'user_id' => $this->user_id,
+							'user_id' => $this->user_id,
-'user_level' => $this->user_level,
+							'user_level' => $this->user_level,
-));
+						));
-}
+				}
-else if ( !$login_result['success'] && $login_result['error'] === 'valid_reset' )
+				else if ( !$login_result['success'] && $login_result['error'] === 'valid_reset' )
-{
+				{
-return $this->get_login_response('reset_pass_used', false, array(
+					return $this->get_login_response('reset_pass_used', false, array(
-'redirect_url' => $login_result['redirect_url']
+							'redirect_url' => $login_result['redirect_url']
-));
+						));
-}
+				}
-else
+				else
-{
+				{
-return $this->get_login_response('login_failure', 'invalid_credentials');
+					return $this->get_login_response('login_failure', 'invalid_credentials');
-}
+				}
-break;
+				break;
-case 'clean_key':
+			case 'clean_key':
-// Clean out a key, since it won't be used.
+				// Clean out a key, since it won't be used.
-// This is called when the user clicks Cancel in the AJAX login interface.
+				// This is called when the user clicks Cancel in the AJAX login interface.
-if ( !empty($req['key_aes']) )
+				if ( !empty($req['key_aes']) )
-{
+				{
-$this->fetch_public_key($req['key_aes']);
+					$this->fetch_public_key($req['key_aes']);
-}
+				}
-if ( !empty($req['key_dh']) )
+				if ( !empty($req['key_dh']) )
-{
+				{
-$pk = $db->escape($req['key_dh']);
+					$pk = $db->escape($req['key_dh']);
-$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE public_key = '$pk';");
+					$q = $db->sql_query('DELETE FROM ' . table_prefix . "diffiehellman WHERE public_key = '$pk';");
-if ( !$q )
+					if ( !$q )
-$db->die_json();
+						$db->die_json();
-}
+				}
-return array(
+				return array(
-'mode' => 'noop'
+						'mode' => 'noop'
-);
+					);
-break;
+				break;
-case 'respond_password_reset':
+			case 'respond_password_reset':
-die(enano_json_encode(array(
+				die(enano_json_encode(array(
-'mode' => 'login_success_reset',
+						'mode' => 'login_success_reset',
-'user_id' => $req['user_id'],
+						'user_id' => $req['user_id'],
-'temp_password' => $req['temp_password'],
+						'temp_password' => $req['temp_password'],
-'respawn_info' => $this->process_login_request(array('mode' => 'getkey'))
+						'respawn_info' => $this->process_login_request(array('mode' => 'getkey'))
-)));
+					)));
-break;
+				break;
-case 'logout':
+			case 'logout':
-if ( !$this->started )
+				if ( !$this->started )
-$this->start();
+					$this->start();
-if ( !isset($req['csrf_token']) )
+				if ( !isset($req['csrf_token']) )
-return array(
+					return array(
-'mode' => 'error',
+							'mode' => 'error',
-'error' => 'Invalid CSRF token'
+							'error' => 'Invalid CSRF token'
-);
+						);
-if ( $req['csrf_token'] !== $this->csrf_token )
+				if ( $req['csrf_token'] !== $this->csrf_token )
-return array(
+					return array(
-'mode' => 'error',
+							'mode' => 'error',
-'error' => 'Invalid CSRF token'
+							'error' => 'Invalid CSRF token'
-);
+						);
-$level = isset($req['level']) && is_int($req['level']) ? $req['level'] : USER_LEVEL_MEMBER;
+				$level = isset($req['level']) && is_int($req['level']) ? $req['level'] : USER_LEVEL_MEMBER;
-if ( ($result = $this->logout($level)) === 'success' )
+				if ( ($result = $this->logout($level)) === 'success' )
-{
+				{
-return array(
+					return array(
-'mode' => 'logout_success'
+						'mode' => 'logout_success'
-);
+					);
-}
+				}
-else
+				else
-{
+				{
-return array(
+					return array(
-'mode' => 'error',
+						'mode' => 'error',
-'error' => $result
+						'error' => $result
-);
+					);
-}
+				}
-break;
+				break;
-}
+		}
-}
+	}
-/**
+	/**
-* Generate a packet to send to the client for logins.
+	* Generate a packet to send to the client for logins.
-* @param string mode
+	* @param string mode
-* @param array
+	* @param array
-* @return array
+	* @return array
-*/
+	*/
-function get_login_response($mode, $error = false, $base = array())
+	function get_login_response($mode, $error = false, $base = array())
-{
+	{
-$this->start();
+		$this->start();
-// init
+		// init
-$response = $base;
+		$response = $base;
-// modules in the packet
+		// modules in the packet
-$response['mode'] = $mode;
+		$response['mode'] = $mode;
-$response['error'] = $error;
+		$response['error'] = $error;
-$response['crypto'] = $mode !== 'login_success' ? $this->get_login_crypto_packet() : false;
+		$response['crypto'] = $mode !== 'login_success' ? $this->get_login_crypto_packet() : false;
-$response['lockout'] = $mode !== 'login_success' ? $this->get_lockout_info() : false;
+		$response['lockout'] = $mode !== 'login_success' ? $this->get_lockout_info() : false;
-$response['extended_time'] = intval(getConfig('session_remember_time', '30'));
+		$response['extended_time'] = intval(getConfig('session_remember_time', '30'));
-$response['username'] = $this->user_logged_in ? $this->username : false;
+		$response['username'] = $this->user_logged_in ? $this->username : false;
-return $response;
+		return $response;
-}
+	}
-/**
+	/**
-* Get a packet of crypto flags for login.
+	* Get a packet of crypto flags for login.
-* @return array
+	* @return array
-*/
+	*/
-function get_login_crypto_packet()
+	function get_login_crypto_packet()
-{
+	{
-global $dh_supported, $_math;
+		global $dh_supported, $_math;
-$response = array();
+		$response = array();
-$response['dh_enable'] = $dh_supported;
+		$response['dh_enable'] = $dh_supported;
-$response['aes_key'] = $this->rijndael_genkey();
+		$response['aes_key'] = $this->rijndael_genkey();
-// Can we do Diffie-Hellman? If so, generate and stash a public/private key pair.
+		// Can we do Diffie-Hellman? If so, generate and stash a public/private key pair.
-if ( $dh_supported )
+		if ( $dh_supported )
-{
+		{
-$dh_key_priv = dh_gen_private();
+			$dh_key_priv = dh_gen_private();
-$dh_key_pub = dh_gen_public($dh_key_priv);
+			$dh_key_pub = dh_gen_public($dh_key_priv);
-$dh_key_priv = $_math->str($dh_key_priv);
+			$dh_key_priv = $_math->str($dh_key_priv);
-$dh_key_pub = $_math->str($dh_key_pub);
+			$dh_key_pub = $_math->str($dh_key_pub);
-$response['dh_public_key'] = $dh_key_pub;
+			$response['dh_public_key'] = $dh_key_pub;
-// store the keys in the DB
+			// store the keys in the DB
-$this->sql('INSERT INTO ' . table_prefix . "diffiehellman( public_key, private_key ) VALUES ( '$dh_key_pub', '$dh_key_priv' );");
+			$this->sql('INSERT INTO ' . table_prefix . "diffiehellman( public_key, private_key ) VALUES ( '$dh_key_pub', '$dh_key_priv' );");
-}
+		}
-return $response;
+		return $response;
-}
+	}
 }
 /**
 * Class used to fetch permissions for a specific page. Used internally by SessionManager.
 * @package Enano
 * @license http://www.gnu.org/copyleft/gpl.html
 * @access private
 */
 class Session_ACLPageInfo {
-/**
+	/**
-* The page ID of this ACL info package
+	* The page ID of this ACL info package
-* @var string
+	* @var string
-*/
+	*/
-var $page_id;
+	var $page_id;
-/**
+	/**
-* The namespace of the page being checked
+	* The namespace of the page being checked
-* @var string
+	* @var string
-*/
+	*/
-var $namespace;
+	var $namespace;
-/**
+	/**
-* Our list of permission types.
+	* Our list of permission types.
-* @access private
+	* @access private
-* @var array
+	* @var array
-*/
+	*/
-var $acl_types = Array();
+	var $acl_types = Array();
-/**
+	/**
-* The list of descriptions for the permission types
+	* The list of descriptions for the permission types
-* @var array
+	* @var array
-*/
+	*/
-var $acl_descs = Array();
+	var $acl_descs = Array();
-/**
+	/**
-* A list of dependencies for ACL types.
+	* A list of dependencies for ACL types.
-* @var array
+	* @var array
-*/
+	*/
-var $acl_deps = Array();
+	var $acl_deps = Array();
-/**
+	/**
-* Our tell-all list of permissions. Do not even try to change this.
+	* Our tell-all list of permissions. Do not even try to change this.
-* @access private
+	* @access private
-* @var array
+	* @var array
-*/
+	*/
-var $perms = Array();
+	var $perms = Array();
-/**
+	/**
-* Array to track which default permissions are being used
+	* Array to track which default permissions are being used
-* @var array
+	* @var array
-* @access private
+	* @access private
-*/
+	*/
-var $acl_defaults_used = Array();
+	var $acl_defaults_used = Array();
-/**
+	/**
-* Tracks whether Wiki Mode is on for the page we're operating on.
+	* Tracks whether Wiki Mode is on for the page we're operating on.
-* @var bool
+	* @var bool
-*/
+	*/
-var $wiki_mode = false;
+	var $wiki_mode = false;
-/**
+	/**
-* Tracks where permissions were calculated using the ACL_INHERIT_* constants. Layout:
+	* Tracks where permissions were calculated using the ACL_INHERIT_* constants. Layout:
-* array(
+	* array(
-*   [permission_name] => array(
+	*   [permission_name] => array(
-*       [src] => ACL_INHERIT_*
+	*       [src] => ACL_INHERIT_*
-*       [rule_id] => integer
+	*       [rule_id] => integer
-*     ),
+	*     ),
-*   ...
+	*   ...
-* )
+	* )
-*
+	*
-* @var array
+	* @var array
-*/
+	*/
-var $perm_resolve_table = array();
+	var $perm_resolve_table = array();
-#
+	#
-# USER PARAMETERS
+	# USER PARAMETERS
-#
+	#
-/**
+	/**
-* User ID
+	* User ID
-* @var int
+	* @var int
-*/
+	*/
-var $user_id = 1;
+	var $user_id = 1;
-/**
+	/**
-* Group membership associative array (group_id => group_name)
+	* Group membership associative array (group_id => group_name)
-* @var array
+	* @var array
-*/
+	*/
-var $groups = array();
+	var $groups = array();
-/**
+	/**
-* Constructor.
+	* Constructor.
-* @param string $page_id The ID of the page to check
+	* @param string $page_id The ID of the page to check
-* @param string $namespace The namespace of the page to check.
+	* @param string $namespace The namespace of the page to check.
-* @param array $acl_types List of ACL types
+	* @param array $acl_types List of ACL types
-* @param array $acl_descs List of human-readable descriptions for permissions (associative)
+	* @param array $acl_descs List of human-readable descriptions for permissions (associative)
-* @param array $acl_deps List of dependencies for permissions. For example, viewing history/diffs depends on the ability to read the page.
+	* @param array $acl_deps List of dependencies for permissions. For example, viewing history/diffs depends on the ability to read the page.
-* @param array $base What to start with - this is an attempt to reduce the number of SQL queries.
+	* @param array $base What to start with - this is an attempt to reduce the number of SQL queries.
-* @param int|string $user_id_or_name Username or ID to search for, defaults to current user
+	* @param int|string $user_id_or_name Username or ID to search for, defaults to current user
-* @param array $resolve_table Debugging info for tracking where rules came from, defaults to a blank array.
+	* @param array $resolve_table Debugging info for tracking where rules came from, defaults to a blank array.
-*/
+	*/
-function __construct($page_id, $namespace, $acl_types, $acl_descs, $acl_deps, $base, $user_id = null, $groups = null, $resolve_table = array())
+	function __construct($page_id, $namespace, $acl_types, $acl_descs, $acl_deps, $base, $user_id = null, $groups = null, $resolve_table = array())
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-// hack
+		// hack
-if ( isset($base['__resolve_table']) )
+		if ( isset($base['__resolve_table']) )
-{
+		{
-unset($base['__resolve_table']);
+			unset($base['__resolve_table']);
-}
+		}
-foreach ( $acl_types as $perm_type => $_ )
+		foreach ( $acl_types as $perm_type => $_ )
-{
+		{
-if ( !$session->check_acl_scope($perm_type, $namespace) )
+			if ( !$session->check_acl_scope($perm_type, $namespace) )
-{
+			{
-unset($acl_types[$perm_type]);
+				unset($acl_types[$perm_type]);
-unset($acl_deps[$perm_type]);
+				unset($acl_deps[$perm_type]);
-unset($acl_descs[$perm_type]);
+				unset($acl_descs[$perm_type]);
-unset($base[$perm_type]);
+				unset($base[$perm_type]);
-}
+			}
-}
+		}
-$this->acl_deps = $acl_deps;
+		$this->acl_deps = $acl_deps;
-$this->acl_types = $acl_types;
+		$this->acl_types = $acl_types;
-$this->acl_descs = $acl_descs;
+		$this->acl_descs = $acl_descs;
-$this->perms = $acl_types;
+		$this->perms = $acl_types;
-$this->perms = $session->acl_merge_complete($this->perms, $base);
+		$this->perms = $session->acl_merge_complete($this->perms, $base);
-$this->perm_resolve_table = array();
+		$this->perm_resolve_table = array();
-if ( is_array($resolve_table) )
+		if ( is_array($resolve_table) )
-$this->perm_resolve_table = $resolve_table;
+			$this->perm_resolve_table = $resolve_table;
-if ( is_int($user_id) && is_array($groups) )
+		if ( is_int($user_id) && is_array($groups) )
-{
+		{
-$this->user_id = $user_id;
+			$this->user_id = $user_id;
-$this->groups = $groups;
+			$this->groups = $groups;
-}
+		}
-else
+		else
-{
+		{
-$this->user_id = $session->user_id;
+			$this->user_id = $session->user_id;
-$this->groups = $session->groups;
+			$this->groups = $session->groups;
-}
+		}
-$this->page_id = $page_id;
+		$this->page_id = $page_id;
-$this->namespace = $namespace;
+		$this->namespace = $namespace;
-$this->__calculate();
+		$this->__calculate();
-}
+	}
-/**
+	/**
-* Performs the actual permission calculation.
+	* Performs the actual permission calculation.
-* @access private
+	* @access private
-*/
+	*/
-private function __calculate()
+	private function __calculate()
-{
+	{
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-$page_id =& $this->page_id;
+		$page_id =& $this->page_id;
-$namespace =& $this->namespace;
+		$namespace =& $this->namespace;
-// PAGE group info
+		// PAGE group info
-$pg_list = $paths->get_page_groups($page_id, $namespace);
+		$pg_list = $paths->get_page_groups($page_id, $namespace);
-$pg_info = '';
+		$pg_info = '';
-foreach ( $pg_list as $g_id )
+		foreach ( $pg_list as $g_id )
-{
+		{
-$pg_info .= ' ( page_id=\'' . $g_id . '\' AND namespace=\'__PageGroup\' ) OR';
+			$pg_info .= ' ( page_id=\'' . $g_id . '\' AND namespace=\'__PageGroup\' ) OR';
-}
+		}
-// Build a query to grab ACL info
+		// Build a query to grab ACL info
-$bs = 'SELECT rules,target_type,target_id,page_id,namespace,rule_id,pg.pg_name,g.group_name FROM '.table_prefix."acl AS a\n"
+		$bs = 'SELECT rules,target_type,target_id,page_id,namespace,rule_id,pg.pg_name,g.group_name FROM '.table_prefix."acl AS a\n"
-. "  LEFT JOIN " . table_prefix . "page_groups AS pg\n"
+				. "  LEFT JOIN " . table_prefix . "page_groups AS pg\n"
-. "    ON ( ( a.page_id = CAST(pg.pg_id AS char) AND a.namespace = '__PageGroup' ) OR ( a.namespace != '__PageGroup' ) )\n"
+				. "    ON ( ( a.page_id = CAST(pg.pg_id AS char) AND a.namespace = '__PageGroup' ) OR ( a.namespace != '__PageGroup' ) )\n"
-. "  LEFT JOIN " . table_prefix . "groups AS g\n"
+				. "  LEFT JOIN " . table_prefix . "groups AS g\n"
-. "    ON ( ( a.target_type = " . ACL_TYPE_GROUP . " AND a.target_id = g.group_id ) OR ( a.target_type != " . ACL_TYPE_GROUP . " ) )\n";
+				. "    ON ( ( a.target_type = " . ACL_TYPE_GROUP . " AND a.target_id = g.group_id ) OR ( a.target_type != " . ACL_TYPE_GROUP . " ) )\n";
-$bs .= '  WHERE ' . "\n"
+		$bs .= '  WHERE ' . "\n"
-. '  ( ';
+					. '  ( ';
-$q = Array();
+		$q = Array();
-$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id='.$this->user_id.' )';
+		$q[] = '( target_type='.ACL_TYPE_USER.' AND target_id='.$this->user_id.' )';
-if(count($this->groups) > 0)
+		if(count($this->groups) > 0)
-{
+		{
-foreach($this->groups as $g_id => $g_name)
+			foreach($this->groups as $g_id => $g_name)
-{
+			{
-$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
+				$q[] = '( target_type='.ACL_TYPE_GROUP.' AND target_id='.intval($g_id).' )';
-}
+			}
-}
+		}
-// The reason we're using an ORDER BY statement here is because ACL_TYPE_GROUP is less than ACL_TYPE_USER, causing the user's individual
+		// The reason we're using an ORDER BY statement here is because ACL_TYPE_GROUP is less than ACL_TYPE_USER, causing the user's individual
-// permissions to override group permissions.
+		// permissions to override group permissions.
-$bs .= implode(" OR\n    ", $q) . ' ) AND (' . $pg_info . ' ( page_id=\''.$db->escape($page_id).'\' AND namespace=\''.$db->escape($namespace).'\' ) )
+		$bs .= implode(" OR\n    ", $q) . ' ) AND (' . $pg_info . ' ( page_id=\''.$db->escape($page_id).'\' AND namespace=\''.$db->escape($namespace).'\' ) )
-ORDER BY target_type ASC, page_id ASC, namespace ASC;';
+			ORDER BY target_type ASC, page_id ASC, namespace ASC;';
-$q = $session->sql($bs);
+		$q = $session->sql($bs);
-if ( $row = $db->fetchrow($q, true) )
+		if ( $row = $db->fetchrow($q, true) )
-{
+		{
-do
+			do
-{
+			{
-$rules = $session->string_to_perm($row['rules']);
+				$rules = $session->string_to_perm($row['rules']);
-$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
+				$is_everyone = ( $row['target_type'] == ACL_TYPE_GROUP && $row['target_id'] == 1 );
-// log where this comes from
+				// log where this comes from
-if ( $row['namespace'] == '__PageGroup' )
+				if ( $row['namespace'] == '__PageGroup' )
-{
+				{
-$src = ( $is_everyone ) ? ACL_INHERIT_PG_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_PG_GROUP : ACL_INHERIT_PG_USER );
+					$src = ( $is_everyone ) ? ACL_INHERIT_PG_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_PG_GROUP : ACL_INHERIT_PG_USER );
-$pg_name = $row['pg_name'];
+					$pg_name = $row['pg_name'];
-}
+				}
-else
+				else
-{
+				{
-$src = ( $is_everyone ) ? ACL_INHERIT_LOCAL_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_LOCAL_GROUP : ACL_INHERIT_LOCAL_USER );
+					$src = ( $is_everyone ) ? ACL_INHERIT_LOCAL_EVERYONE : ( $row['target_type'] == ACL_TYPE_GROUP ? ACL_INHERIT_LOCAL_GROUP : ACL_INHERIT_LOCAL_USER );
-}
+				}
-if ( $row['group_name'] )
+				if ( $row['group_name'] )
-{
+				{
-$group_name = $row['group_name'];
+					$group_name = $row['group_name'];
-}
+				}
-foreach ( $rules as $perm_type => $perm_value )
+				foreach ( $rules as $perm_type => $perm_value )
-{
+				{
-if ( !isset($this->perms[$perm_type]) )
+					if ( !isset($this->perms[$perm_type]) )
-continue;
+						continue;
-if ( $this->perms[$perm_type] == AUTH_DENY )
+					if ( $this->perms[$perm_type] == AUTH_DENY )
-continue;
+						continue;
-if ( !$session->check_acl_scope($perm_type, $this->namespace) )
+					if ( !$session->check_acl_scope($perm_type, $this->namespace) )
-continue;
+						continue;
-$this->perm_resolve_table[$perm_type] = array(
+					$this->perm_resolve_table[$perm_type] = array(
-'src' => $src,
+							'src' => $src,
-'rule_id' => $row['rule_id']
+							'rule_id' => $row['rule_id']
-);
+						);
-if ( isset($pg_name) )
+					if ( isset($pg_name) )
-{
+					{
-$this->perm_resolve_table[$perm_type]['pg_name'] = $pg_name;
+						$this->perm_resolve_table[$perm_type]['pg_name'] = $pg_name;
-}
+					}
-if ( isset($group_name) )
+					if ( isset($group_name) )
-{
+					{
-$this->perm_resolve_table[$perm_type]['group_name'] = $group_name;
+						$this->perm_resolve_table[$perm_type]['group_name'] = $group_name;
-}
+					}
-}
+				}
-$this->acl_merge_with_current($rules, $is_everyone);
+				$this->acl_merge_with_current($rules, $is_everyone);
-} while ( $row = $db->fetchrow() );
+			} while ( $row = $db->fetchrow() );
-}
+		}
-$this->page_id = $page_id;
+		$this->page_id = $page_id;
-$this->namespace = $namespace;
+		$this->namespace = $namespace;
-$pathskey = $paths->nslist[$this->namespace].sanitize_page_id($this->page_id);
+		$pathskey = $paths->nslist[$this->namespace].sanitize_page_id($this->page_id);
-$ns = namespace_factory($this->page_id, $this->namespace);
+		$ns = namespace_factory($this->page_id, $this->namespace);
-$cdata = $ns->get_cdata();
+		$cdata = $ns->get_cdata();
-$ppwm = $cdata['wiki_mode'];
+		$ppwm = $cdata['wiki_mode'];
-unset($ns, $cdata);
+		unset($ns, $cdata);
-if ( $ppwm == 1 && ( $session->user_logged_in || getConfig('wiki_mode_require_login') != '1' ) )
+		if ( $ppwm == 1 && ( $session->user_logged_in || getConfig('wiki_mode_require_login') != '1' ) )
-$this->wiki_mode = true;
+			$this->wiki_mode = true;
-else if ( $ppwm == 1 && !$session->user_logged_in && getConfig('wiki_mode_require_login') == '1' )
+		else if ( $ppwm == 1 && !$session->user_logged_in && getConfig('wiki_mode_require_login') == '1' )
-$this->wiki_mode = true;
+			$this->wiki_mode = true;
-else if ( $ppwm == 0 )
+		else if ( $ppwm == 0 )
-$this->wiki_mode = false;
+			$this->wiki_mode = false;
-else if ( $ppwm == 2 )
+		else if ( $ppwm == 2 )
-{
+		{
-if ( $this->user_id > 1 )
+			if ( $this->user_id > 1 )
-{
+			{
-$this->wiki_mode = ( getConfig('wiki_mode') == '1' );
+				$this->wiki_mode = ( getConfig('wiki_mode') == '1' );
-}
+			}
-else
+			else
-{
+			{
-$this->wiki_mode = ( getConfig('wiki_mode') == '1' && getConfig('wiki_mode_require_login') != '1' );
+				$this->wiki_mode = ( getConfig('wiki_mode') == '1' && getConfig('wiki_mode_require_login') != '1' );
-}
+			}
-}
+		}
-else
+		else
-{
+		{
-// Ech. Internal logic failure, this should never happen.
+			// Ech. Internal logic failure, this should never happen.
-return false;
+			return false;
-}
+		}
-}
+	}
-/**
+	/**
-* Tells us whether permission $type is allowed or not based on the current rules.
+	* Tells us whether permission $type is allowed or not based on the current rules.
-* @param string $type The permission identifier ($acl_type passed to sessionManager::register_acl_type())
+	* @param string $type The permission identifier ($acl_type passed to sessionManager::register_acl_type())
-* @param bool $no_deps If true, disables dependency checking
+	* @param bool $no_deps If true, disables dependency checking
-* @return bool True if allowed, false if denied or if an error occured
+	* @return bool True if allowed, false if denied or if an error occured
-*/
+	*/
-function get_permissions($type, $no_deps = false)
+	function get_permissions($type, $no_deps = false)
-{
+	{
-// echo '<pre>' . print_r($this->perms, true) . '</pre>';
+		// echo '<pre>' . print_r($this->perms, true) . '</pre>';
-global $db, $session, $paths, $template, $plugins; // Common objects
+		global $db, $session, $paths, $template, $plugins; // Common objects
-if ( isset( $this->perms[$type] ) )
+		if ( isset( $this->perms[$type] ) )
-{
+		{
-if ( $this->perms[$type] == AUTH_DENY )
+			if ( $this->perms[$type] == AUTH_DENY )
-{
+			{
-$ret = false;
+				$ret = false;
-}
+			}
-else if ( $this->perms[$type] == AUTH_WIKIMODE && $this->wiki_mode )
+			else if ( $this->perms[$type] == AUTH_WIKIMODE && $this->wiki_mode )
-{
+			{
-$ret = true;
+				$ret = true;
-}
+			}
-else if ( $this->perms[$type] == AUTH_WIKIMODE && !$this->wiki_mode )
+			else if ( $this->perms[$type] == AUTH_WIKIMODE && !$this->wiki_mode )
-{
+			{
-$ret = false;
+				$ret = false;
-}
+			}
-else if ( $this->perms[$type] == AUTH_ALLOW )
+			else if ( $this->perms[$type] == AUTH_ALLOW )
-{
+			{
-$ret = true;
+				$ret = true;
-}
+			}
-else if ( $this->perms[$type] == AUTH_DISALLOW )
+			else if ( $this->perms[$type] == AUTH_DISALLOW )
-{
+			{
-$ret = false;
+				$ret = false;
-}
+			}
-}
+		}
-else if(isset($this->acl_types[$type]))
+		else if(isset($this->acl_types[$type]))
-{
+		{
-if ( $this->acl_types[$type] == AUTH_DENY )
+			if ( $this->acl_types[$type] == AUTH_DENY )
-$ret = false;
+				$ret = false;
-else if ( $this->acl_types[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
+			else if ( $this->acl_types[$type] == AUTH_WIKIMODE && $paths->wiki_mode )
-$ret = true;
+				$ret = true;
-else if ( $this->acl_types[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
+			else if ( $this->acl_types[$type] == AUTH_WIKIMODE && !$paths->wiki_mode )
-$ret = false;
+				$ret = false;
-else if ( $this->acl_types[$type] == AUTH_ALLOW )
+			else if ( $this->acl_types[$type] == AUTH_ALLOW )
-$ret = true;
+				$ret = true;
-else if ( $this->acl_types[$type] == AUTH_DISALLOW )
+			else if ( $this->acl_types[$type] == AUTH_DISALLOW )
-$ret = false;
+				$ret = false;
-}
+		}
-else
+		else
-{
+		{
-// ACL type is undefined
+			// ACL type is undefined
-$caller = 'unknown';
+			$caller = 'unknown';
-if ( function_exists('debug_backtrace') )
+			if ( function_exists('debug_backtrace') )
-{
+			{
-if ( $bt = @debug_backtrace() )
+				if ( $bt = @debug_backtrace() )
-{
+				{
-foreach ( $bt as $trace )
+					foreach ( $bt as $trace )
-{
+					{
-$file = basename($trace['file']);
+						$file = basename($trace['file']);
-if ( $file != 'sessions.php' )
+						if ( $file != 'sessions.php' )
-{
+						{
-$caller = $file . ':' . $trace['line'];
+							$caller = $file . ':' . $trace['line'];
-break;
+							break;
-}
+						}
-}
+					}
-}
+				}
-}
+			}
-trigger_error('Unknown access type "' . $type . '", called from ' . $caller . '', E_USER_WARNING);
+			trigger_error('Unknown access type "' . $type . '", called from ' . $caller . '', E_USER_WARNING);
-return false; // Be on the safe side and deny access
+			return false; // Be on the safe side and deny access
-}
+		}
-if ( !$no_deps )
+		if ( !$no_deps )
-{
+		{
-if ( !$this->acl_check_deps($type) )
+			if ( !$this->acl_check_deps($type) )
-return false;
+				return false;
-}
+		}
-return $ret;
+		return $ret;
-}
+	}
-/**
+	/**
-* Tell us if the dependencies for a given permission are met.
+	* Tell us if the dependencies for a given permission are met.
-* @param string The ACL permission ID
+	* @param string The ACL permission ID
-* @param bool If true, does not return a boolean value, but instead returns array of dependencies that fail
+	* @param bool If true, does not return a boolean value, but instead returns array of dependencies that fail
-* @return bool
+	* @return bool
-*/
+	*/
-function acl_check_deps($type, $debug = false)
+	function acl_check_deps($type, $debug = false)
-{
+	{
-// This will only happen if the permissions table is hacked or improperly accessed
+		// This will only happen if the permissions table is hacked or improperly accessed
-if(!isset($this->acl_deps[$type]))
+		if(!isset($this->acl_deps[$type]))
-return $debug ? array() : true;
+			return $debug ? array() : true;
-// Permission has no dependencies?
+		// Permission has no dependencies?
-if(sizeof($this->acl_deps[$type]) < 1)
+		if(sizeof($this->acl_deps[$type]) < 1)
-return $debug ? array() : true;
+			return $debug ? array() : true;
-// go through them all and build a flat list of dependencies
+		// go through them all and build a flat list of dependencies
-$deps = $this->acl_deps[$type];
+		$deps = $this->acl_deps[$type];
-while(true)
+		while(true)
-{
+		{
-$j = sizeof($deps);
+			$j = sizeof($deps);
-for ( $i = 0; $i < $j; $i++ )
+			for ( $i = 0; $i < $j; $i++ )
-{
+			{
-$b = $deps;
+				$b = $deps;
-if ( !isset($this->acl_deps[$deps[$i]]) )
+				if ( !isset($this->acl_deps[$deps[$i]]) )
-{
+				{
-// Action $type depends on action $deps[$i] which cannot be satisfied because $deps[$i] is out of scope.
+					// Action $type depends on action $deps[$i] which cannot be satisfied because $deps[$i] is out of scope.
-trigger_error("acl_check_deps: $type depends on {$deps[$i]} which is not within scope of $this->namespace; this indicats a bug in ACL rule specification", E_USER_WARNING);
+					trigger_error("acl_check_deps: $type depends on {$deps[$i]} which is not within scope of $this->namespace; this indicats a bug in ACL rule specification", E_USER_WARNING);
-return false;
+					return false;
-}
+				}
-$deps = array_merge($deps, $this->acl_deps[$deps[$i]]);
+				$deps = array_merge($deps, $this->acl_deps[$deps[$i]]);
-if( $b == $deps )
+				if( $b == $deps )
-{
+				{
-break 2;
+					break 2;
-}
+				}
-$j = sizeof($deps);
+				$j = sizeof($deps);
-}
+			}
-}
+		}
-$debugdata = array();
+		$debugdata = array();
-foreach($deps as $d)
+		foreach($deps as $d)
-{
+		{
-// Our dependencies are fully resolved, so tell get_permissions() to not recursively call this function
+			// Our dependencies are fully resolved, so tell get_permissions() to not recursively call this function
-if ( !$this->get_permissions($d, true) )
+			if ( !$this->get_permissions($d, true) )
-{
+			{
-if ( $debug )
+				if ( $debug )
-{
+				{
-$debugdata[] = $d;
+					$debugdata[] = $d;
-}
+				}
-else
+				else
-{
+				{
-return false;
+					return false;
-}
+				}
-}
+			}
-}
+		}
-return $debug ? $debugdata : true;
+		return $debug ? $debugdata : true;
-}
+	}
-/**
+	/**
-* Merges the ACL array sent with the current permissions table, deciding precedence based on whether defaults are in effect or not.
+	* Merges the ACL array sent with the current permissions table, deciding precedence based on whether defaults are in effect or not.
-* @param array The array to merge into the master ACL list
+	* @param array The array to merge into the master ACL list
-* @param bool If true, $perm is treated as the "new default"
+	* @param bool If true, $perm is treated as the "new default"
-* @param int 1 if this is a site-wide ACL, 2 if page-specific. Defaults to 2.
+	* @param int 1 if this is a site-wide ACL, 2 if page-specific. Defaults to 2.
-*/
+	*/
-function acl_merge_with_current($perm, $is_everyone = false, $scope = 2)
+	function acl_merge_with_current($perm, $is_everyone = false, $scope = 2)
-{
+	{
-foreach ( $this->perms as $i => $p )
+		foreach ( $this->perms as $i => $p )
-{
+		{
-if ( isset($perm[$i]) )
+			if ( isset($perm[$i]) )
-{
+			{
-if ( $is_everyone && !@$this->acl_defaults_used[$i] )
+				if ( $is_everyone && !@$this->acl_defaults_used[$i] )
-continue;
+					continue;
-// Decide precedence
+				// Decide precedence
-if ( isset($this->acl_defaults_used[$i]) )
+				if ( isset($this->acl_defaults_used[$i]) )
-{
+				{
-//echo "$i: default in use, overriding to: {$perm[$i]}<br />";
+					//echo "$i: default in use, overriding to: {$perm[$i]}<br />";
-// Defaults are in use, override
+					// Defaults are in use, override
-$this->perms[$i] = $perm[$i];
+					$this->perms[$i] = $perm[$i];
-$this->acl_defaults_used[$i] = ( $is_everyone );
+					$this->acl_defaults_used[$i] = ( $is_everyone );
-}
+				}
-else
+				else
-{
+				{
-//echo "$i: default NOT in use";
+					//echo "$i: default NOT in use";
-// Defaults are not in use, merge as normal
+					// Defaults are not in use, merge as normal
-if ( $this->perms[$i] != AUTH_DENY )
+					if ( $this->perms[$i] != AUTH_DENY )
-{
+					{
-//echo ", but overriding";
+						//echo ", but overriding";
-$this->perms[$i] = $perm[$i];
+						$this->perms[$i] = $perm[$i];
-}
+					}
-//echo "<br />";
+					//echo "<br />";
-}
+				}
-}
+			}
-}
+		}
-}
+	}
 }
 /**
 * Cron task - clears out the database of Diffie-Hellman keys
 */
 function cron_clean_login_cache()
 {
-global $db, $session, $paths, $template, $plugins; // Common objects
+	global $db, $session, $paths, $template, $plugins; // Common objects
-if ( !$db->sql_query('DELETE FROM ' . table_prefix . 'diffiehellman;') )
+	if ( !$db->sql_query('DELETE FROM ' . table_prefix . 'diffiehellman;') )
-$db->_die();
+		$db->_die();
-setConfig('login_key_cache', '');
+	setConfig('login_key_cache', '');
 }
 register_cron_task('cron_clean_login_cache', 72);
 /**
 * Cron task - clears out outdated high-auth session keys
 */
 function cron_clean_old_admin_keys()
 {
-global $db, $session, $paths, $template, $plugins; // Common objects
+	global $db, $session, $paths, $template, $plugins; // Common objects
-$threshold = time() - ( 15 * 60 );
+	$threshold = time() - ( 15 * 60 );
-$ul_member = USER_LEVEL_MEMBER;
+	$ul_member = USER_LEVEL_MEMBER;
-if ( !$db->sql_query('DELETE FROM ' . table_prefix . "session_keys WHERE time < $threshold AND auth_level > $ul_member;") )
+	if ( !$db->sql_query('DELETE FROM ' . table_prefix . "session_keys WHERE time < $threshold AND auth_level > $ul_member;") )
-$db->_die();
+		$db->_die();
 }
 // Once a week
 register_cron_task('cron_clean_old_admin_keys', 168);

changeset 1227	bdac73ed481e
parent 1216	4125e19d3b27
child 1231	4797a4a88533